网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
You need to control SSH, HTTP, and Telnet access to an MX240 router through any interface.You have decided to use a firewall filter.How should you apply the firewall filter?（）
- A、as an outbound filter on interface fxp0
- B、as an outbound filter on interface lo0
- C、as an inbound filter on interface fxp0
- D、as an inbound filter on interface lo0
参考答案
更多 “You need to control SSH, HTTP, and Telnet access to an MX240 router through any interface.You have decided to use a firewall filter.How should you apply the firewall filter?（）A、as an outbound filter on interface fxp0B、as an outbound filter on interface lo0C、as an inbound filter on interface fxp0D、as an inbound filter on interface lo0” 相关考题
考题
You need to control SSH, HTTP, and Telnet access to an MX240 router through any interface.You have decided to use a firewall filter. How should you apply the firewall filter?()
A. as an outbound filter on interface fxp0B. as an outbound filter on interface lo0C. as an inbound filter on interface fxp0D. as an inbound filter on interface lo0
考题
Referring to the exhibit, you want to block HTTP access to Web－Server from the subnet where Mal－User is located. All other traffic should be permitted.Which firewall filter configuration do you use?()
A.B.C.D.
考题
You have a firewall enforcer receiving resource access policies from a Junos Pulse Access Control Service. You are using Network and Security Manager (NSM) for configuration management on that firewall. The firewall can also be configured using its built-in command-line interface (CLI) or Web-based user interface (WebUI).To avoid conflicting configurations, which two interfaces must you use to configure the firewall enforcer?（）A. CLIB. WebUIC. NSMD. Junos Pulse Access Control Service
考题
You have a firewall filter applied in an inbound direction on a customer interface. You would like this filter to protect your network from a spoofed denial of service attack. Which action should be configured to accomplish your goal?（）A. then rejectB. then discardC. then next filterD. then silent-drop
考题
Click the Exhibit button. Referring to the exhibit, which statement is true about the IP packet flow through interface ge－3／0／0.0?()
A. All packets set to be forwarded out interface ge-3/0/0 will be dropped by the firewall filter fire1.B. All packets set to be forwarded out interface ge-3/0/0 will NOT dropped by the firewall filter fire1.C. All packets entering the router on interface ge-3/0/0.0 will be dropped by the firewall filter fire1.D. All packets set to be forwarded out interface ge-3/0/0, except those sourced locally by the Routing Engine, will be dropped by the firewall filter fire1.
考题
You have a firewall filter containing two terms applied in an inbound direction on a customer interface.You would like this filter to protect your network from a spoofed denial of service attack. Which match criterion should be configured ito identify unwanted packets?（）A. from source-portB. from source-addressC. from destination-addressD. from destination-port
考题
A firewall filter is applied as an input filter on a transit interface. What three types of traffic will this affect? ()
A. inbound traffic transiting the routerB. outbound traffic transiting the routerC. traffic destined to the Routing EngineD. traffic destined to the interface address on which the filter is applied
考题
You have a firewall filter containing two terms applied in an inbound direction on a customer interface.You would like this filter to protect your network from a spoofed denial of service attack. Which match criterion should be configured ito identify unwanted packets?（）A、from source-portB、from source-addressC、from destination-addressD、from destination-port
考题
You need to control SSH, HTTP, and Telnet access to an MX240 router through any interface.You have decided to use a firewall filter. How should you apply the firewall filter?（）A、as an outbound filter on interface fxp0B、as an outbound filter on interface lo0C、as an inbound filter on interface fxp0D、as an inbound filter on interface lo0
考题
You need to control SSH. HTTP, and Telnet access to an MX240 router through any interface. You have decided to use a firewall filter. How should you apply the firewall filter?（）A、as an outbound filter on interface fxp0B、as an outbound filter on interface lo0C、as an inbound filter on interface fxp0D、as an inbound filter on interface lo0
考题
某网络连接形如：HostA----GE0/0--MSR-1--S1/0---------S1/0--MSR-2--GE0/0----HostB 两台MSR 路由器MSR1、MSR2 通过各自的S1/0 接口背靠背互连，各自的GigabitEthernet0/0 接口分别 连接客户端主机HostA 和HostB。通过配置IP 地址和路由目前网络中HostA 可以和HostB 实现互通。 如今在MSR-2 上增加了如下配置： firewall enable acl number 3000 rule 0 deny tcp destination-port eq telnet interface Serial1/0 link-protocol ppp ip address 1.1.1.2 255.255.255.252 firewall packet-filter 3000 inbound firewall packet-filter 3000 outbound interface GigabitEthernet0/0 ip address 10.1.1.1 255.255.255.0 那么如下哪些说法是正确的？（）A、后配置的firewall packet-filter 3000 outbound会取代firewall packet-filter 3000 inbound命令B、在HostB上无法成功Telnet到MSR-1上C、在HostB上可以成功Telnet到MSR-1上D、最后配置的firewall packet-filter 3000 outbound不会取代firewall packet-filter 3000 inbound命令
考题
Two routers configured to run BGP have been connected to a firewall， one on the inside interface and one on the outside interface. BGP has been configured so the two routers should peer， including the correct BGP session endpoint addresses and the correct BGP session hop-count limit （EBGP multihop）. What is a good first test to see if BGP will work across the firewall？（）A、Attempt to TELNET from the router connected to the inside of the firewall to the router connected to the outside of the firewall. If telnet works， BGP will work， since telnet and BGP both use TCP to transport data.B、Ping from the router connected to the inside interface of the firewall to the router connected to the outside interface of the firewall. If you can ping between them， BGP should work， since BGP uses IP to transport packets.C、There is no way to make BGP work across a firewall without special configuration， so there is no simple test that will show you if BGP will work or not， other than trying to start the peering session.D、There is no way to make BGP work across a firewall.
考题
What are two reasons that a network administrator would use access lists? (Choose two.) （）。A、to control vty access into a router B、to control broadcast traffic through a router C、to filter traffic as it passes through a router D、to filter traffic that originates from the router E、to replace passwords as a line of defense against security incursions
考题
You've configured an interface with an IP address and commited the change. You then commited a change that added an exception in a firewall filter to allow this network through the filter. You realize that this work was done on the wrong router. How do you undo all these changes?（）A、rollback 2B、rollback 1C、rollback 0D、rollback 3
考题
You have a firewall filter applied in an inbound direction on a customer interface. You would like this filter to protect your network from a spoofed denial of service attack. Which action should be configured to accomplish your goal?（）A、then rejectB、then discardC、then next filterD、then silent-drop
考题
You have a firewall filter containing two terms applied in an inbound direction on a customer interface. You would like this filter to protect your network from a spoofed denial of service attack. What match criterion should be used in the first term of the filter？（）A、Source TCP portB、Source IP addressC、Destination TCP portD、Destination IP address
考题
You need to control SSH, HTTP, and Telnet access to an MX240 router through any interface. You have decided to use a firewall filter. How should you apply the firewall filter?（）A、as an outbound filter on interface fxp0B、as an outbound filter on interface lo0C、as an inbound filter on interface fxp0D、as an inbound filter on interface lo0
考题
You configured an interface with an IP address and committed the change. You then committed a change that added an exception in a firewall filter to allow this network through the filter. You realize that this work was done on the wrong router. How do you undo all these changes?（）A、rollback 2B、rollback 1C、rollback 0D、rollback 3
考题
A firewall filter is applied as an input filter on a transit interface. What three types of traffic will this affect? （）A、inbound traffic transiting the routerB、outbound traffic transiting the routerC、traffic destined to the Routing EngineD、traffic destined to the interface address on which the filter is applied
考题
You have a firewall enforcer receiving resource access policies from a Junos Pulse Access Control Service. You are using Network and Security Manager (NSM) for configuration management on that firewall. The firewall can also be configured using its built-in command-line interface (CLI) or Web-based user interface (WebUI). To avoid conflicting configurations, which two interfaces must you use to configure the firewall enforcer?（）A、CLIB、WebUIC、NSMD、Junos Pulse Access Control Service
考题
You have a server that runs Windows Server 2003 Service Pack 2 (SP2). The server is configured as a network address translation (NAT) router. The server has two network adapters and provides Internet access for the network.You need to prevent traffic on port 21 from being sent to the Internet. All other outbound traffic must be allowed.What should you do?（） A、On the network adapter that is connected to the LAN, enable TCP/IP filtering. B、On the network adapter that is connected to the Internet, enable TCP/IP filtering. C、From the Routing and Remote Access snap-in, open the properties of the interface connected to the Internet, select the Services and Ports tab, and define a new service. D、From the Routing and Remote Access snap-in, open the properties of the interface connected to the Internet, select the NAT/Basic Firewall tab, and define a new static packet filter.
考题
多选题Click the Exhibit button. In the exhibit，the protect-re filter is applied as an input filter on the lo0.0 interface and all possible services are enabled under [edit system services]. Which two methods can you use to access the router？（）AFTPBSSHCTelnetDJ-Web
考题
单选题You need to control SSH, HTTP, and Telnet access to an MX240 router through any interface.You have decided to use a firewall filter.How should you apply the firewall filter?（）A
as an outbound filter on interface fxp0B
as an outbound filter on interface lo0C
as an inbound filter on interface fxp0D
as an inbound filter on interface lo0
考题
多选题A firewall filter is applied as an input filter on a transit interface. What three types of traffic will this affect? （）Ainbound traffic transiting the routerBoutbound traffic transiting the routerCtraffic destined to the Routing EngineDtraffic destined to the interface address on which the filter is applied
考题
单选题You need to control SSH, HTTP, and Telnet access to an MX240 router through any interface. You have decided to use a firewall filter. How should you apply the firewall filter?（）A
as an outbound filter on interface fxp0B
as an outbound filter on interface lo0C
as an inbound filter on interface fxp0D
as an inbound filter on interface lo0
考题
单选题You need to control SSH. HTTP, and Telnet access to an MX240 router through any interface. You have decided to use a firewall filter. How should you apply the firewall filter?（）A
as an outbound filter on interface fxp0B
as an outbound filter on interface lo0C
as an inbound filter on interface fxp0D
as an inbound filter on interface lo0
考题
单选题Two routers configured to run BGP have been connected to a firewall， one on the inside interface and one on the outside interface. BGP has been configured so the two routers should peer， including the correct BGP session endpoint addresses and the correct BGP session hop-count limit （EBGP multihop）. What is a good first test to see if BGP will work across the firewall？ （）A
Attempt to TELNET from the router connected to the inside of the firewall to the router connected to the outside of the firewall. If telnet works， BGP will work， since telnet and BGP both use TCP to transport data.B
Ping from the router connected to the inside interface of the firewall to the router connected to the outside interface of the firewall. If you can ping between them， BGP should work， since BGP uses IP to transport packets.C
There is no way to make BGP work across a firewall without special configuration， so there is no simple test that will show you if BGP will work or not， other than trying to start the peering session.D
There is no way to make BGP work across a firewall.
热门标签
最新试卷
