A. zombie agentsB. SYN floodC. IP packet fragmentsD. Wi……

单项选择题Interface ge-0 0 2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17 24. A Web server with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. The Web server is attached to the ge-0 0 0.0 interface of your device. You must use NAT to make the Web server reachable from the Internet using port translation. Which type of NAT must you configure?（）

A. source NAT with address shifting
B. pool-based source NAT
C. static destination NAT
D. pool-based destination NAT

单项选择题Which encryption type is used to secure user data in an IPsec tunnel?（）

A. symmetric key encryption
B. asymmetric key encryption
C. RSA
D. digital certificates

单项选择题Which command shows the event and traceoptions file for chassis clusters?（）

A. show log chassisd
B. show log clusterd
C. show log jsrpd
D. show log messages

多项选择题Which three contexts can be used as matching conditions in a source NAT configuration? （）(Choose three.)

A. routing-instance
B. zone
C. interface
D. policy
E. rule-set

单项选择题You want to test a configured screen value prior to deploying.Which statement will allow you to accomplish this?（）

A. [edit security screen] user@host# show ids-option untrust-screen { alarm-test-only; }
B. [edit security screen] user@host# show ids-option untrust-screen { alarm-without-drop; }
C. [edit security screen] user@host# show ids-option untrust-screen { alarm-no-drop; }
D. [edit security screen] user@host# show ids-option untrust-screen { test-without-drop; }