欢迎来到建筑考试题库网 建筑考试题库官网
全部科目 > juniper认证考试 > JN0-331

单项选择题

Based on the configuration shown in the exhibit, what are the actions of the security policy?()
[edit schedulers]
user@host# show
scheduler now {
monday all-day;
tuesday exclude;
wednesday {
start-time 07:00:00 stop-time 18:00:00;
}
thursday {
start-time 07:00:00 stop-time 18:00:00;
}
}
[edit security policies from-zone Private to-zone External]
user@host# showpolicy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;}
then {
permit {
tunnel {
ipsec-vpn myTunnel;
}
}
}
scheduler-name now;

    A.The policy will always permit transit packets and use the IPsec VPN myTunnel.
    B.The policy will permit transit packets only on Monday, and use the IPsec VPN Mytunnel.
    C.The policy will permit transit packets and use the IPsec VPN myTunnel all day Monday and Wednesday 7am to 6pm, and Thursday 7am to 6pm.
    D.The policy will always permit transit packets, but will only use the IPsec VPN myTunnel all day Monday and Wednesday 7am to 6pm, and Thursday 7am to 6pm.

点击查看答案

相关考题

  • 单项选择题
    ForIKEphase1negotiations,whenisaggressivemodetypicallyused?()

    A.when one of the tunnel peers has a dynamic IP address
    B.when one of the tunnel peers wants to force main mode to be used
    C.when fragmentation of the IKE packet is required between the two peers
    D.when one of the tunnel peers wants to specify a different phase 1 proposal

  • 多项选择题
    WhichtwostatementsaretrueregardingproxyARP?()

    A.Proxy ARP is enabled by default.
    B.Proxy ARP is not enabled by default.
    C.JUNOS security devices can forward ARP requests to a remote device when proxy ARP is enabled.
    D.JUNOS security devices can reply to ARP requests intended for a remote device when proxy ARP is enabled

  • 单项选择题
    Regardingzonetypes,whichstatementistrue?()

    A.You cannot assign an interface to a functional zone.
    B.You can specifiy a functional zone in a security policy.
    C.Security zones must have a scheduler applied.
    D.You can use a security zone for traffic destined for the device itself.

微信小程序免费搜题
微信扫一扫,加关注免费搜题

微信扫一扫,加关注免费搜题