JN0-331单项选择题每日一练(2019.01.16)

单项选择题
In the exhibit， you decided to change myHosts addresses.[edit security policies]user@host# showfrom-zone Private to-zone External {policy MyTraffic {match {source-address myHosts；destination-address ExtServers；application [ junos-ftp junos-bgp ]；}then {permit {tunnel {ipsec-vpn vpnTunnel；}}}}}policy-rematch；What will happen to the new sessions matching the policy and in-progress sessions that hadalready matched the policy？（）
A.New sessions will be evaluated. In-progress sessions will be re-evaluated.
B.New sessions will be evaluated. All in-progress sessions will continue.
C.New sessions will be evaluated. All in-progress sessions will be dropped.
D.New sessions will halt until all in-progress sessions are re-evaluated. In-progress sessions will be re-evaluated and possibly dropped.
单项选择题
Host A opens a Telnet connection to Host B. Host A then opens another Telnet connectionto Host B. These connections are the only communication between Host A and Host B. Thesecurity policy configuration permits both connections.How many flows exist between Host A and Host B？（）
A.1
B.2
C.3
D.4
单项选择题
Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address andnetwork mask of 71.33.252.17/24. A webserver with IP address 10.20.20.1 isrunning an HTTP service on TCP port 8080. The webserver is attached to the ge-0/0/0.0 interface of yourdevice. You must use NAT to make the webserver reachable from the Internet using port translation.Which type of NAT must you configure？（）
A.source NAT with address shifting
B.pool-based source NAT
C.static destination NAT
D.pool-based destination NAT
单项选择题
Based on the configuration shown in the exhibit， what are the actions of the security policy？（）[edit schedulers]user@host# showscheduler now {monday all-day；tuesday exclude；wednesday {start-time 07：00：00 stop-time 18：00：00；}thursday {start-time 07：00：00 stop-time 18：00：00；}}[edit security policies from-zone Private to-zone External]user@host# showpolicy allowTransit {match {source-address PrivateHosts；destination-address ExtServers；application ExtApps；}then {permit {tunnel {ipsec-vpn myTunnel；}}}scheduler-name now；
A.The policy will always permit transit packets and use the IPsec VPN myTunnel.
B.The policy will permit transit packets only on Monday， and use the IPsec VPN Mytunnel.
C.The policy will permit transit packets and use the IPsec VPN myTunnel all day Monday and Wednesday 7am to 6pm， and Thursday 7am to 6pm.
D.The policy will always permit transit packets， but will only use the IPsec VPN myTunnel all day Monday and Wednesday 7am to 6pm， and Thursday 7am to 6pm.
单项选择题
Which operational mode command displays all active IPsec phase 2 security associations？（）
A.show ike security-associations
B.show ipsec security-associations
C.show security ike security-associations
D.show security ipsec security-associations