Host A opens a Telnet connection to Host B. Host A then opens another Telnet connection to Host B. These connections are the only communication between Host A and Host B. The security policy configuration permits both connections.
How many sessions exist between Host A and Host B?（）

单项选择题You want to create an out-of-band management zone and assign the ge-0 0 0.0 interface to that zone.From the [edit] hierarchy, which command do you use to configure this assignment?（）

A. set security zones management interfaces ge-0/0/0.0
B. set zones functional-zone management interfaces ge-0/0/0.0
C. set security zones functional-zone management interfaces ge-0/0/0.0
D. set security zones functional-zone out-of-band interfaces ge-0/0/0.0

单项选择题Which statement is true about a NAT rule action of off?（）

A. The NAT action of off is only supported for destination NAT rule-sets.
B. The NAT action of off is only supported for source NAT rule-sets.
C. The NAT action of off is useful for detailed control of NAT.
D. The NAT action of off is useful for disabling NAT when a pool is exhausted

多项选择题Which two content-filtering features does FTP support?（） (Choose two.)

A. block extension list
B. block MIME type
C. protocol command list
D. notifications-options

单项选择题Using a policy with the policy-rematch flag enabled, what happens to the existing and new sessions when you change the policy action from permit to deny?（）

A. The new sessions matching the policy are denied. The existing sessions are dropped.
B. The new sessions matching the policy are denied. The existingsessions, not being allowed tocarry any traffic, simply timeout.
C. The new sessions matching the policy might be allowed through if they match another policy. The existing sessions are dropped.
D. The new sessions matching the policy are denied. The existing sessions continue until they are completed or their time.

单项选择题Which statement is true when express AV detects a virus in TCP session?（）

A. TCP RST is sent and a session is restarted.
B. TCP connection is closed gracefully and the data content is dropped.
C. TCP traffic is allowed and an SNMP trap is sent.
D. AV scanning is restarted.