Juniper JN0-314 問題集

質問 1：
You want to enforce a Host Checker policy so that only users who pass the policy receive the Employee role. In the admin GUI, which two parameters must you configure? (Choose two.)
A. Select "Require and Enforce" for the Host Checker Policy in the realm authentication policy.
B. Configure the Host Checker policy as a role restriction for the Employee role.
C. Select "Evaluate Policies" for the Host Checker policy in the realm authentication policy.
D. Configure the Host Checker policy as a resource access policy for the Employee role.
正解：B,C

質問 2：
An outside vendor is eligible for the guest role and the contractor role when accessing your network, that is secured with the Junos Pulse Access Control Service.
What is the default role-mapping behavior?
A. The vendor is automatically granted a merged role.
B. The vendor must select a role from a list of eligible roles.
C. The vendor must select a rule from a list of eligible rules.
D. The vendor is automatically mapped to the first configured role
正解：A

質問 3：
What are three default role-mapping rule values that are available for all realms? (Choose three.)
A. Username
B. LDAP user
C. Certificate
D. Custom expressions
E. Source y IP
正解：A,C,D

質問 4：
Your manager has informed you that only specific users can have access to the Preferred Members role, and that these users are restricted to the Preferred Members role. The Preferred Members role-mapping rule is currently set as the last rule in your role-mapping rules and is based on username. Currently all users are assigned to the Preferred Members role-mapping rule.
Which three changes in the admin GUI will enforce your manager's change request? (Choose three.)
A. Edit the Preferred Members role-mapping rule and select "Stop processing rules when this rule matches".
B. Edit the Preferred Members role-mapping rule so that the username is equal to *.
C. Remove the Preferred Members role from the role-mapping rule.
D. Edit the Preferred Members role-mapping rule so that only the select users are assigned to the role-mapping rule.
E. Move the Preferred Members role-mapping rule to the top of the list.
正解：A,D,E

質問 5：
At which point in the authentication process does the Junos Pulse Access Control Service determine whether the endpoint complies with a realm's authentication policy?
A. After the user has successfully been authenticated by the authentication server
B. After the user has been assigned a role
C. Before the user credentials are submitted to the authentication server
D. During the role-mapping process
正解：C

質問 6：
You have created a Host Checker policy that contains multiple rules. You want to inform end users which rule specifically has failed.
In the admin GUI, which configuration setting would you enable?
A. Pre-auth notification
B. Send reason strings
C. Enable Custom Instructions
D. Remediation message
正解：B