多项选择题

You administer a network containing SRX Series firewalls. New policy requires that you implement MAG Series devices to provide access control for end users. The policy requires that the SRX Series devices dynamically enforce security policy based on the source IP address of the user. The policy also requires that the users communicate with protected resources using encrypted traffic.
Which two statements are true?（）

A. The endpoints can use agentless access.
B. Encrypted traffic flows between the endpoint and the enforcer.
C. Encrypted traffic flows between the endpoint and the protected resource
D. The endpoints can use the Odyssey Access Client.

<上一题目录下一题>

热门试题

多项选择题Before replacing a MAG Series device, using the admin GUI, you export two backup files, system.cfg from Maintenance > ImportfExport Configuration and user.cfg from Maintenance > Import Export Users . When you receive the new hardware, you import all of the settings stored in the system.cfg file (including the IP address, network configuration, and device certificates), but you fail to import the user.cfg file. Which three configuration areas were updated by system.cfg?（）

A. Cluster configuration settings
B. Static routes
C. SNMP settings
D. Sign-in policies
E. MAC authentication realms

多项选择题You are configuring an LDAP authentication server, and you want to configure role-mapping rules based on group membership. When you attempt to search for groups in the server catalog, no groups appear.Assuming the LDAP server is reachable and functioning properly, in the admin GUI. Which two parts of the configuration should you verify are correct?（）

A. Finding user entries
B. Authentication required
C. LDAP Server Type
D. Determining group membership

单项选择题A customer is trying to determine which client to deploy. The customer wants to be able to perform Layer 2 authentication as well as connect to the Junos Pulse Secure Access Service.Which client should the customer deploy?（）

A. Windows native supplicant
B. Odyssey Access Client
C. Junos Pulse
D. Network Connect

单项选择题You have multiple realms configured on a MAG Series device. A user is authenticating with a non- Junos Pulse Access Control Service client. The username does not contain a realm suffix.Which behavior will the user experience?（）

A. The user will not be able to log-in, as the Junos Pulse Access Control Service device cannot map the user to a realm when the realm value is empty.
B. The user will be mapped to all realms available to the user.
C. The Junos Pulse Access Control Service device displays a page where the user must choose from a list of realms.
D. The endpoint is assigned to the first realm in the list whose authentication server is a match with the endpoints software.

单项选择题You are installing a new deployment of the Junos Pulse Access Control Service. You have an existing RADIUS server that has a populated user file. You are considering using the RADIUS proxy feature.Which consideration must you take into account?（）

A. Your RADIUS server database must be replicated onto another device for redundancy.
B. Inner proxy creates a tunnel between the supplicant and the external server.
C. RADIUS proxy causes the role assignment process to be skipped.
D. Outer proxy configuration passes authentication data to the external RADIUS server in clear text.