多项选择题

Which three statements are true when working with high-availability clusters？（）

A.The valid cluster-id range is between 0 and 255.
B.JUNOS security devices can belong to more than one cluster if cluster virtualization is enabled.
C.If the cluster-id value is set to 0 on a JUNOS security device， the device will not participate in the cluster.
D.A reboot is required if the cluster-id or node value is changed.
E.JUNOS security devices can belong to one cluster only.

<上一题目录下一题>

热门试题

单项选择题YouhavebeentaskedwithinstallingtwoSRX5600platformsinahigh-availabilitycluster.Which requirementmustbemetforasuccessfulinstallation？（）

A.You must enable SPC detect within the configuration.
B.You must enable active-active failover for redundancy.
C.You must ensure all SPCs use the same slot placement.
D.You must configure auto-negotiation on the control ports of both devices

多项选择题Whichtwostatementsaretrueregardinghigh-availabilitychassisclustering？（）

A.A chassis cluster consists of two devices.
B.A chassis cluster consists of two or more devices.
C.Devices participating in a chassis cluster can be different models.
D.Devices participating in a chassis cluster must be the same models

多项选择题Whatarethreebenefitsofusingchassisclustering？（）

A.Provides stateful session failover for sessions.
B.Increases security capabilities for IPsec sessions.
C.Provides active-passive control and data plane redundancy.
D.Enables automated fast-reroute capabilities.
E.Synchronizes configuration files and session state

单项选择题Regardingsecuretunnel（st）interfaces，whichstatementistrue？（）

A.You cannot assign st interfaces to a security zone.
B.You cannot apply static NAT on an st interface logical unit.
C.st interfaces are optional when configuring a route-based VPN
D.A static route can reference the st interface logical unit as the next-hop

单项选择题Which command is needed to change this policy to a tunnel policy for a policy-based VPN？（） [edit security policies from-zone trust to-zone untrust] user@host# show policy tunnel-traffic { match { source-address local-net； destination-address remote-net； application any； then { permit； } }

A.set policy tunnel-traffic then tunnel remote-vpn
B.set policy tunnel-traffic then permit tunnel remote-vpn
C.set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn permit
D.set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn