JN0-314章节练习(2019.04.24)

多项选择题
You want to create a security policy on an SRX240 that redirects unauthenticated users back to the Junos Pulse Access Control Service.Which two steps must you take to accomplish this task?（）
A. Configure a captive-portal service that redirects all traffic back to the Junos Pulse Access Control Service.
B. Configure a security policy that references the unified-access-control captive-portal service.
C. Configure a captive-portal service that redirects unauthenticated traffic back to the Junos Pulse Access Control Service.
D. Configure a security policy that references the unified-access-control intranet-controller service.
单项选择题
An administrator has created three different Odyssey Access Client preconfiguration files and assigned them to three different roles in the same realm.Which action should the administrator take to ensure that users get the correct Odyssey Access Client preconfiguration file?（）
A. Configure each user account in the auth server with the appropriate Odyssey Access Client preconfiguration files.
B. Configure the role-mapping rules with the appropriate Odyssey Access Client preconfiguration files.
C. Ensure that merge roles is selected in the role-mapping rules.
D. Ensure that the first role a user is mapped to is the role with the appropriate Odyssey Access Client preconfiguration file.
单项选择题
When using RADIUS as an external authentication method for 802.1X authentication for the Junos Pulse Access Control Service, what must you do to ensure that the RADIUS authentication works properly?（）
A. Configure IP helper to forward the authentication requests from the clients to the external RADIUS server
B. Configure the supplicant as anexternal authentication server
C. Configure RADIUS proxy on the realm
D. Specify the correct RADIUS port 389 on the Junos Pulse Access Control Service
单项选择题
A customer is trying to determine which client to deploy. The customer wants to be able to perform Layer 2 authentication as well as connect to the Junos Pulse Secure Access Service.Which client should the customer deploy?（）
A. Windows native supplicant
B. Odyssey Access Client
C. Junos Pulse
D. Network Connect
单项选择题
A customer is deploying a new Junos Pulse Access Control Service and has completed the initial boot configuration as prompted using a serial connection. The customer now wants to complete the rest of the configuration using the admin GUI.Into which port on the Junos Pulse Access Control Service should the customer plug the network cable to enable access to the admin GUI?（）
A. the internal interface
B. the external interface
C. the management interface
D. the console interface
单项选择题
You are an administrator of an active/passive cluster of MAG Series devices running in mixed- mode configuration (IF-MAP server and authenticating users). The active user count is quickly approaching the maximum limit of the cluster. You have been directed to reconfigure the cluster to an active/active cluster and add a new license to increase the total number of active users the cluster can support.What must you do before changing the cluster configuration?（）
A. Apply the new license to the passive node of the cluster.
B. Configure an external load balancer to hold the V IP.
C. Disable the active node in the cluster.
D. Remove the IF-MAP server configuration.
单项选择题
What is a type of firewall enforcer supported by the Junos Pulse Access Control Service?（）
A. Checkpoint firewall
B. SRX Series device
C. DP sensor
D. MX Series device
单项选择题
Click the Exhibit button.What is the cause of the error shown in the exhibit?（）
A. A RADIUS request is being received from a device that is not configured on the RADIUS Client page.
B. A user entered an incorrect password during RADIUS authentication.
C. A RADIUS proxy attempt failed to reach the configured proxy server.
D. The RADIUS shared secret is incorrect.
多项选择题
You have a firewall enforcer protecting resources in a data center. A user is experiencing difficulty connecting to a protected resource.Which two elements must exist so the user can access the resource?（）
A. Resource access policy on the MAG Series device
B. IPsec routing policy on the MAG Series device
C. General traffic policy blocking access through the firewall enforcer
D. Auth table entry on the firewall enforcer
多项选择题
What are two use cases enabled by IF-MAP Federation?（）
A. Users authenticated to one Junos Pulse Access Control Service can transparently access resources protected by another Junos Pulse Access Control Service.
B. Users authenticated to a Junos Pulse Access Control Service can transparently access resources protected by a Junos Pulse Secure Access Service.
C. Remote access users authenticated to a Junos Pulse Secure Access Service can transparently access resources protected by a Junos Pulse Access Control Service.
D. Remote access users authenticated to one Junos Pulse Secure Access Service can transparently access resources protected by another Junos Pulse Secure Access Service.