题目内容 (请给出正确答案)
[主观题]

Which two statements are true for a security policy? ()(Choose two.)

A. It controls inter-zone traffic.

B. It controls intra-zone traffic.

C. It is named with a system-defined name.

D. It controls traffic destined to the device‘s ingress interface.

提问人:网友ylb2215 发布时间:2022-01-07
参考答案
查看官方参考答案
如搜索结果不匹配,请 联系老师 获取答案
更多“Which two statements are true …”相关的问题
第1题
A system administrator wants to configure 802.1X on an Ethernet switch to enable access to specific parts of the network based on group memberships.How can the administrator accomplish this goal?()

A.Configure roles based on departments and assign access based on source IP address.

B.Configure roles based on the user‘s manager and assign access based on the user‘s MAC address

C.Configure roles based on group memberships and assign a specific VLAN to the role.

D.Configure roles based on RADIUS request attribute and assign a specific VLAN to the role.

点击查看答案
第2题
Using an LDAP authentication server, what do you configure to validate certificate attributes?()

A. Use the "is exactly" or "contains" operators.

B. Create a user filter matching thedn of the certificate.

C. Verify that the certificate is issued by a publicly trusted cs.

D. Match the certificate type and value with an attribute from theldap server.

点击查看答案
第3题
Which statement is true about SurfControl integrated Web filter solution?()

A. The SurfControl server in the cloud provides the SRX device with the category of the URL as well as the reputation of the URL.

B. The SurfControl server in the cloud provides the SRX device with only the category of the URL.

C. The SurfControl server in the cloud provides the SRX device with only the reputation of the URL.

D. The SurfControl server in the cloud provides the SRX device with a decision to permit or deny the URL.

点击查看答案
第4题
You issue the command telnet interface ge-1/1/0 10.10.10.1 source 192.168.100.1 bypass-routing. Which statement is correct?()

A. The bypass-routing parameter is ignored when using private IP addressing.

B. The telnet session will have the source IP address 10.10.10.1.

C. The telnet session will connect to the neighboring device‘s interface ge-1/1/0.

D. Return traffic for the telnet session might not arrive at interface ge-1/1/0.

点击查看答案
第5题
WhichthreesecurityconcernscanbeaddressedbyatunnelmodeIPsecVPNsecuredbyESP?()

A.dataintegrity

B.dataconfidentiality

C.dataauthentication

D.outerIPheaderconfidentiality

E.outerIPheaderauthentication

点击查看答案
第6题
WhichthreesecurityconcernscanbeaddressedbyatunnelmodeIPsecVPNsecuredbyAH?()

A.dataintegrity

B.dataconfidentiality

C.dataauthentication

D.outerIPheaderconfidentiality

E.outerIPheaderauthentication

点击查看答案
第7题
Whichtwostatementsregardingasymmetrickeyencryptionaretrue?()

A.Thesamekeyisusedforencryptionanddecryption.

B.Itiscommonlyusedtocreatedigitalcertificatesignatures.

C.Itusestwokeys:oneforencryptionandadifferentkeyfordecryption.

D.Anattackercandecryptdataiftheattackercapturesthekeyusedforencryption

点击查看答案
第8题
WhichtwostatementsabouttheDiffie-Hellman(DH)keyexchangeprocessarecorrect?()

A.IntheDHkeyexchangeprocess,thesessionkeyisneverpassedacrossthenetwork.

B.IntheDHkeyexchangeprocess,thepublicandprivatekeysaremathematicallyrelatedusingtheDH algorithm.

C.IntheDHkeyexchangeprocess,thesessionkeyispassedacrossthenetworktothepeerfor confirmation.

D.IntheDHkeyexchangeprocess,thepublicandprivatekeysarenotmathematicallyrelated,ensuring highersecurity

点击查看答案
第9题
WhichthreeparametersareconfiguredintheIKEpolicy?()

A.mode

B.presharedkey

C.externalinterface

D.securityproposals

E.deadpeerdetectionsettings

点击查看答案
账号:
你好,尊敬的用户
复制账号
发送账号至手机
获取验证码
发送
温馨提示
该问题答案仅针对搜题卡用户开放,请点击购买搜题卡。
马上购买搜题卡
我已购买搜题卡, 登录账号 继续查看答案
重置密码
确认修改
欢迎分享答案

为鼓励登录用户提交答案,简答题每个月将会抽取一批参与作答的用户给予奖励,具体奖励活动请关注官方微信公众号:简答题

简答题官方微信公众号

警告:系统检测到您的账号存在安全风险

为了保护您的账号安全,请在“简答题”公众号进行验证,点击“官网服务”-“账号验证”后输入验证码“”完成验证,验证成功后方可继续查看答案!

微信搜一搜
简答题
点击打开微信
警告:系统检测到您的账号存在安全风险
抱歉,您的账号因涉嫌违反简答题购买须知被冻结。您可在“简答题”微信公众号中的“官网服务”-“账号解封申请”申请解封,或联系客服
微信搜一搜
简答题
点击打开微信