单项选择题

A. The Junos OS drops any flow that does not match the ……

After applying the policy-rematch statement under the security policies stanza, what would happen to an existing flow if the policy source address or the destination address is changed and committed?（）

A. The Junos OS drops any flow that does not match the source address or destination address.
B. All traffic is dropped.
C. All existing sessions continue.
D. The Junos OS does a policy re-evaluation.

<上一题目录下一题>

热门试题

多项选择题Which two functions of the Junos OS are handled by the data plane? （）(Choose two.)

A. NAT
B. OSPF
C. SNMP
D. SCREEN options

单项选择题Which statement is true regarding NAT?（）

A. NAT is not supported on SRX Series devices.
B. NAT requires special hardware on SRX Series devices.
C. NAT is processed in the control plane.
D. NAT is processed in the data plane.

单项选择题In a chassis cluster with two SRX 5800 devices, the interface ge-13 0 0 belongs to which device?（）

A. This interface is a system-created interface.
B. This interface belongs to node 0 of the cluster.
C. This interface belongs to node 1 of the cluster.
D. This interface will not exist because SRX 5800 devices have only 12 slots.

单项选择题When using UTM features in an HA cluster, which statement is true for installing the licenses on the cluster members?（）

A. One UTM cluster license will activate UTM features on both members.
B. Each device will need a UTM license generated for its serial number.
C. Each device will need a UTM license generated for the cluster, but licenses can be applied to either member.
D. HA clustering automatically comes with UTM licensing, no additional actions are needed.

多项选择题An IPsec tunnel is established on an SRX Series Gateway on an interface whose IP address was obtained using DHCP.Which two statements are true? （）(Choose two.)

A. Only main mode can be used for IKE negotiation
B. A local-identity must be defined
C. It must be the initiator for IKE
D. A remote-identity must be defined