Juniper JN0-314 問題集

質問 1：
You are setting up Junos Pulse client access to your Junos Pulse Access Control Service. Due to security policy, you need to ensure clients can only connect to the service when they are connected to the corporate network.
Which configuration steps meet the requirement?
A. Configure Junos Pulse agentless access with DNS server and endpoint address options.
B. Configure Junos Pulse Location Awareness with DHCP server and endpoint protection options.
C. Configure Junos Pulse agentless access with DHCP server and endpoint protection options.
D. Configure Junos Pulse Location Awareness with DNS server and endpoint address options.
正解：D

質問 2：
Which Juniper Networks product line supports Junos Pulse Access Control Service functionality?
A. MX Series 3D Universal Edge Routers
B. EX Series Ethernet Switches
C. Junos Pulse Gateways
D. Junos Space
正解：A

質問 3：
A customer uses an SRX Series device for firewall enforcement. They complain that it does not seem to be working correctly. The customer suspects that the firewall and the Junos Pulse Gateway have not connected properly.
Which two steps would confirm this? (Choose two.)
A. Look for the IP address and "connected" enforcer messages in the Events log of the Junos Pulse Gateway.
B. Look at the Sensors log of the Junos Pulse Gateway to determine whether there are any "wrong password" messages.
C. Ping the Junos Pulse Gateway from the SRX Series device to confirm that nothing is blocking the traffic.
D. Type show services unified-access-control status in the SRX Series device and note the state information.
正解：A,D

質問 4：
You want to create a security policy on an SRX240 that redirects unauthenticated users back to the Junos Pulse Access Control Service.
Which two steps must you take to accomplish this task? (Choose two.)
A. Configure a security policy that references the unified-access-control intranet-controller service.
B. Configure a captive-portal service that redirects all traffic back to the Junos Pulse Access Control Service.
C. Configure a captive-portal service that redirects unauthenticated traffic back to the Junos Pulse Access Control Service.
D. Configure a security policy that references the unified-access-control captive-portal service.
正解：C,D

質問 5：
-- Exhibit -[edit]
user@srx> show services unified-access-control status
Host Address Port Interface State
IC 11123 ge-0/0/0.0 connecting
-- Exhibit -
You have connected a newly installed SRX Series firewall enforcer to your SM160 and the firewall enforcer has remained in the state shown in the exhibit for several hours.
Which action would help resolve the issue?
A. Verify that ssl is an enabled system service for host-inbound traffic on the SRX interface or zone connected to the SM160.
B. Verify that you can open an SSH session between the SRX Series device and the SM160.
C. Verify bidirectional routing between the SRX Series device and the SM160.
D. Verify that ike is an enabled system service for host-inbound traffic on the SRX interface or zone connected to the SM160.
正解：C

質問 6：
Which two statements are true about IP address pools when using IPsec tunnels through NAT devices? (Choose two.)
A. IP address pools must consist of a contiguous block of addresses.
B. IP address pools can consist of a list of noncontiguous IP addresses.
C. A single IP address pool can be associated with multiple enforcers.
D. Each enforcer requires a separate IP address pool.
正解：A,C