多项选择题

An IPsec tunnel is established on an SRX Series Gateway on an interface whose IP address was obtained using DHCP.Which two statements are true? （）(Choose two.)

A. Only main mode can be used for IKE negotiation
B. A local-identity must be defined
C. It must be the initiator for IKE
D. A remote-identity must be defined

<上一题目录下一题>

热门试题

单项选择题Which Web-filtering technology can be used at the same time as integrated Web filtering on a single branch SRX Series device?（）

A. Websense redirect Web filtering
B. local Web filtering (blacklist or whitelist)
C. firewall user authentication
D. ICAP

多项选择题Which two statements about Junos software packet handling are correct?（）(Choose two.)

A. The Junos OS applies service ALGs only for the first packet of a flow.
B. The Junos OS uses fast-path processing only for the first packet of a flow.
C. The Junos OS performs policy lookup only for the first packet of a flow.
D. The Junos OS applies SCREEN options for both first and consecutive packets of a flow.

单项选择题Which zone type can be specified in a policy?（）

A.security
B.functional
C.user
D.system

单项选择题The SRX device receives a packet and determines that it does not match an existing session.After SCREEN options are evaluated, what is evaluated next?（）

A. source NAT
B. destination NAT
C. route lookup
D. zone lookup

多项选择题Which two parameters are configured in IPsec policy? （）(Choose two.)

A. mode
B. IKE gateway
C. security proposal
D. Perfect Forward Secrecy