单项选择题

A. It enables an attacker to perform an IP sweep of dev……

A system administrator detects thousands of open idle connections from the same source.Which problem can arise from this type of attack?（）

A. It enables an attacker to perform an IP sweep of devices.
B. It enables a hacker to know which operating system the system is running.
C. It can overflow the session table to its limit, which can result in rejection of legitimate traffic.
D. It creates a ping of death and can cause the entire network to be infected with a virus.

<上一题目录下一题>

热门试题

单项选择题Which statement describes a security zone?（）

A. A security zone can contain one or more interfaces.
B. A security zone can contain interfaces in multiple routing instances.
C. A security zone must contain two or more interfaces.
D. A security zone must contain bridge groups.

单项选择题What is the correct syntax for applying node-specific parameters to each node in a chassis cluster?（）

A. set apply-groups node$
B. set apply-groups (node)
C. set apply-groups $(node)
D. set apply-groups (node)all

多项选择题Which three components can be leveraged when defining a local whitelist or blacklist for antispam on a branch SRX Series device? (Choose three.)（）

A. spam assassin filtering score
B. sender country
C. sender IP address
D. sender domain
E. sender e-mail address

单项选择题A network administrator has configured source NAT, translating to an address that is on a locally connected subnet.The administrator sees the translation working, but traffic does not appear to come back. What is causing the problem?（）

A. The host needs to open the telnet port.
B. The host needs a route for the translated address.
C. The administrator must use a proxy-arp policy for the translated address.
D. The administrator must use a security policy, which will allow communication between the zones.

多项选择题Which two statements in a source NAT configuration are true regarding addresses, rule-sets, or rules that overlap?（）(Choose two.)

A. Addresses used for NAT pools should never overlap.
B. If more than one rule-set matches traffic, the rule-set with the most specific context takes precedence.
C. If traffic matches two rules within the same rule-set, both rules listed in the configuration are applied.
D. Dynamic source NAT rules take precedence over static source NAT rules.