多选题
Which two are characteristics of link-state routing protocols?（） (Choose two.)
Routers choose a best path for a destination based on the SPF algorithm.
All routers in a given area or level build a consistent database describing the network's topology.
Routers choose the best path for a destination based on the interface on which they received the link stateadvertisement with the lowest cost.
All routers in a given area or level forward link state advertisements between interfaces in the same area or level, adding their metric to the link state advertisement's cost information when they forward it.
单选题
Click the Exhibit button. Which type of source NAT is configured in the exhibit?（）
static source pool
interface source pool
source pool with PAT
souce pool without PAT
单选题
Based on the configuration shown in the exhibit, what will happen to the traffic matching the security policy?（）
The traffic is permitted through the myTunnel IPSec tunnel only on Tuesdays.
The traffic is permitted through the myTunnel IPSec tunnel daily, with the exception of Mondays.
The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between 7:00 am and 6:00 pm, and Thursdays between 7:00 am and 6:00 pm.
The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between 6:01 pm and 6:59 am, and Thursdays between 6:01 pm and 6:59 am.
多选题
Which three parameters are configured in the IKE policy?（） (Choose three.)
mode
preshared key
external interface
security proposals
dead peer detection settings
单选题
A traditional router is better suited than a firewall device for which function? （）
VPN establishment
packet-based forwarding
stateful packet processing
network address translation
单选题
Which parameters must you select when configuring operating system probes SCREEN options?（）
syn-fin, syn-flood, and tcp-no-frag
syn-fin, port-scan, and tcp-no-flag
syn-fin, fin-no-ack, and tcp-no-frag
syn-fin, syn-ack-ack-proxy, and tcp-no-frag
单选题
Interface ge-0/0/2.0 of your router is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A host with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. This host isattached to the ge-0/0/0.0 interface of your router. You must use interface-based static NAT to make the HTTP service on the host reachable from the Internet. On which IP address and TCP port can Internet hosts reach the HTTP service?（）
IP address 10.10.10.1 and TCP port 8080
IP address 71.33.252.17 and TCP port 80
IP address 71.33.251.19 and TCP port 80
IP address 71.33.252.19 and TCP port 8080
多选题
On which three traffic types does firewall pass-through authentication work? （）(Choose three.)
ping
FTP
Telnet
HTTP
HTTPS
多选题
In JUNOS software with enhanced services, which three packet elements are inspected to determineif a session already exists? （）(Choose three.)
IP protocol
IP time-to-live
source and destination IP address
source and destination MAC address
source and destination TCP/UDP port
