单选题
Which command do you use to manually remove antivirus patterns?（）
request security utm anti-virus juniper-express-engine pattern-delete
request security utm anti-virus juniper-express-engine pattern-reload
request security utm anti-virus juniper-express-engine pattern-remove
delete security utm anti-virus juniper-express-engine antivirus-pattern
多选题
Which three security concerns can be addressed by a tunnel mode IPsec VPN secured by AH?（） (Choose three.)
data integrity
data confidentiality
data authentication
outer IP header confidentiality
outer IP header authentication
单选题
Which configuration keyword ensures that all in-progress sessions are re-evaluated upon committing a security policy change?（）
policy-rematch
policy-evaluate
rematch-policy
evaluate-policy
单选题
What is the proper sequence of evaluation for the SurfControl integrated Web filter solution?（）
whitelists, blacklists, SurfControl categories
blacklists, whitelists, SurfControl categories
SurfControl categories, whitelists, blacklists
SurfControl categories, blacklists, whitelists
单选题
Which security or functional zone name has special significance to the Junos OS?（）
self
trust
untrust
junos-global
单选题
What is the purpose of a chassis cluster?（）
Chassis clusters are used to aggregate routes.
Chassis clusters are used to create aggregate interfaces.
Chassis clusters are used to group two chassis into one logical chassis.
Chassis clusters are used to group all interfaces into one cluster interface.
多选题
Regarding content filtering, what are two pattern lists that can be configured in the Junos OS? （）(Choose two.)
protocol list
MIME
block list
extension
单选题
Which statement describes a security zone?（）
A security zone can contain one or more interfaces.
A security zone can contain interfaces in multiple routing instances.
A security zone must contain two or more interfaces.
A security zone must contain bridge groups.
单选题
A network administrator wants to permit Telnet traffic initiated from the address book entry the10net in a zone called UNTRUST to the address book entry Server in a zone called TRUST. However, the administrator does not want the server to be able to initiate any type of traffic from the TRUST zone to the UNTRUST zone. Which configuration statement would correctly accomplish this task?（）
from-zone UNTRUST to-zone TRUST { policy DenyServer { match { source-address any; destination-address any; application any; } then { deny; } } } from-zone TRUST to-zone UNTRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }
from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then {deny; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }
from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-ftp; } then { permit; } } }
from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then { permit; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match {source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }
多选题
Which two statements are true with regard to policy ordering? （）(Choose two.)
The last policy is the default policy, which allows all traffic.
The order of policies is not important.
New policies are placed at the end of the policy list.
The insert command can be used to change the order.
