JN0-314章节练习(2019.05.01)

多项选择题
What are three default role-mapping rule values that are available for all realms?（）
A. Username
B. LDAP user
C. Certificate
D. Custom expressions
E. Source y IP
单项选择题
You have configured Junos Pulse on your Windows desktop and want to verify that the IPsec configuration policy is being pushed down to your workstation upon network authentication and login.Which utility program do you use to see this configuration and where do you find it?（）
A. the Pulse Diagnostics Tool in the "File" > "Tools" menu option in the Pulse GUI
B. the Pulse Diagnostics Tool in the "Start" > "All Programs" > "Juniper Networks" > "Junos Pulse" menu folder next to the Junos Pulse application
C. the Pulse Diagnostics Viewer, which you access by simultaneously pressing "Ctrl" and "F2"
D. the Pulse Diagnostics Viewer in the "File" > "Tools" menu option in the Pulse GUI
多项选择题
Your IT director has decided to allow employees to use their laptops at home as well as in the office. You have deployed the Junos Pulse client to allow access to the offices 802.1X-enabled wired network. Your company also has the Junos Pulse Secure Access Service deployed. You want the Junos Pulse client to automatically launch the appropriate access method depending on each users location.Which three are supported to determine the users location?（）
A. MAC address
B. DNS server
C. DHCP server
D. resolve address
E. endpoint address
单项选择题
Which protocol is used for communication between the Junos Pulse client and 802.1X-compliant switches when performing Layer 2 enforcement?（）
A. EAP
B. RADIUS
C. SSL
D. EAP-o-HTTP
多项选择题
You want to customize access to the corporate network so that agentiess users are instructed to obtain a certificatebefore accessing the network.Which two configurations solve this problem? （）
A. Create a custom sign-in page with specific instructions in the "Instructions" field.
B. Create a custom sign-in page with specific "Missing Certificate" messages in the "Custom error messages" field.
C. Create a custom sign-in policy with specific instructions in the "Instructions" field.
D. Create a custom sign-in notification and assign it to the "Pre-Auth Sign-in Notification" in the sign-in policy.
多项选择题
You are configuring an LDAP authentication server, and you want to configure role-mapping rules based on group membership. When you attempt to search for groups in the server catalog, no groups appear.Assuming the LDAP server is reachable and functioning properly, in the admin GUI. Which two parts of the configuration should you verify are correct?（）
A. Finding user entries
B. Authentication required
C. LDAP Server Type
D. Determining group membership
多项选择题
A customer wants to create a custom Junos Pulse configuration. Which two are required?（）
A. Connection set
B. Configuration set
C. Custom installer
D. Component set
多项选择题
Your manager has informed you that only specific users can have access to the Preferred Members role, and that these users are restricted to the Preferred Members role. The Preferred Members role-mapping rule is currently set as the last rule in your role-mapping rules and is based on username. Currently all users are assigned to the Preferred Members role-mapping rule.Which three changes in the admin GUI will enforce your managers change request?（）
A. Move the Preferred Members role-mapping rule to the top of the list.
B. Remove the Preferred Members role from the role-mapping rule.
C. Edit the Preferred Members role-mapping rule so that the username is equal to *.
D. Edit the Preferred Members role-mapping rule so that only the select users are assigned to the role-mapping rule.
E. Edit the Preferred Members role-mapping rule and select "Stop processing rules when this rule matches".
多项选择题
A customer has purchased a new Junos Pulse Access Control Service and wants to install it in an existing cluster.After initial configuration, the customer finds that the firmware version running on the Junos Pulse Access Control Service is 4.1 r5, but the existing cluster is running firmware version 4.1 r3.Which two actions must be performed to allow the new Junos Pulse Access Control Service to load the older version of firmware?（）
A. Install a valid license on the new Junos Pulse Access Control Service.
B. When loading the older firmware, delete all the existing data on the Junos Pulse Access Control Service.
C. Add the new Junos Pulse Access Control Service to the existing cluster.
D. Download the 4.1 r3 version firmware from the Juniper support website.
多项选择题
You administer a network containing SRX Series firewalls. New policy requires that you implement MAG Series devices to provide access control for end users. The policy requires that the SRX Series devices dynamically enforce security policy based on the source IP address of the user. The policy also requires that the users communicate with protected resources using encrypted traffic.Which two statements are true?（）
A. The endpoints can use agentless access.
B. Encrypted traffic flows between the endpoint and the enforcer.
C. Encrypted traffic flows between the endpoint and the protected resource
D. The endpoints can use the Odyssey Access Client.