多选题
Which two parameters are configured in IPsec policy? （）(Choose two.)
mode
IKE gateway
security proposal
Perfect Forward Secrecy
单选题
Which zone type can be specified in a policy?（）
security
functional
user
system
单选题
Which statement is correct about HTTP trickling?（）
It prevents the HTTP client or server from timing-out during an antivirus update
It prevents the HTTP client or server from timing-out during antivirus scanning.
It is an attack.
It is used to bypass antivirus scanners.
单选题
Under which Junos hierarchy level are security policies configured?（）
[edit security]
[edit protocols]
[edit firewall]
[edit policy-options]
多选题
Which two statements regarding symmetric key encryption are true?（） (Choose two.)
The same key is used for encryption and decryption.
It is commonly used to create digital certificate signatures.
It uses two keys: one for encryption and a different key for decryption.
An attacker can decrypt data if the attacker captures the key used for encryption.
多选题
Which three advanced permit actions within security policies are valid?（） (Choose three.)
Mark permitted traffic for firewall user authentication.
Mark permitted traffic for SCREEN options.
Associate permitted traffic with an IPsec tunnel.
Associate permitted traffic with a NAT rule.
Mark permitted traffic for IDP processing.
多选题
Which three methods of source NAT does the Junos OS support?（） (Choose three.)
interface-based source NAT
source NAT with address shifting
source NAT using static source pool
interface-based source NAT without PAT
source NAT with address shifting and PAT
多选题
Which two UTM features require a license to be activated? （）(Choose two.)
antispam
antivirus (full AV)
content filtering
Web-filtering redirect
单选题
In a chassis cluster with two SRX 5800 devices, the interface ge-13/0/0 belongs to which device?（）
This interface is a system-created interface.
This interface belongs to node 0 of the cluster.
This interface belongs to node 1 of the cluster.
This interface will not exist because SRX 5800 devices have only 12 slots.
多选题
Which two statements about Junos software packet handling are correct?（）(Choose two.)
The Junos OS applies service ALGs only for the first packet of a flow.
The Junos OS uses fast-path processing only for the first packet of a flow.
The Junos OS performs policy lookup only for the first packet of a flow.
The Junos OS applies SCREEN options for both first and consecutive packets of a flow.
