Juniper JN0-314 問題集

質問 1：
You want to configure your LDAP server so that user entries are queried from a specific starting location.
Which field should you configure to address this need?
A. Member Attribute
B. Nested Group Level
C. Base DN
D. Filter
正解：C

質問 2：
You are the administrator of a Junos Pulse Access Control Service implementation. You must restrict authenticated users connected from the branch offices to a few specific resources within the data center. However, when the authenticated users are connected at the corporate office, they are allowed more access to the data center resources. You have created two roles with different levels of access and are trying to determine the best way of controlling when a user is mapped to a specific role. Having the user prompted to manually select their role is possible, but you want to automate the process.
Which configuration solves this problem?
A. Reorder the role-mapping rules to allow for the more open role to be mapped first and then enable the "stop processing rules when this rule matches" function on this role.
B. Implement a Host Checker policy on the realm that determines the geographic location of the device and restricts the user based on the results of the policy.
C. Implement a RADIUS request attribute policy to assist with realm selection and create different role-mapping rules for the user in each realm.
D. Implement a directory/attribute server on the realm and set up this server to determine by group membership the proper role to which a user should be mapped.
正解：C

質問 3：
You must configure access to the corporate network for employees using a client access method. Users require IPsec tunneling to protected resources and an 802.1X supplicant. Users will access the network using Windows platforms.
Which two client access methods would support these requirements? (Choose two.)
A. Odyssey Access Client
B. Native 802.1X supplicant
C. Junos Pulse
D. Java Agent
正解：A,C

質問 4：
Which two statements are true about the Junos Pulse Access Control Service? (Choose two.)
A. It controls who can access particular resources and applications on a network.
B. It provides IPsec tunnels to endpoints at branch offices.
C. It allows access to the network only from computers and devices that are compliant with defined security policies.
D. It enables NAT functionality for network edge devices.
正解：B,D

質問 5：
Which statement is true about a VIP address in a Junos Pulse Access Control Service cluster?
A. A VIP is required when connecting a firewall enforcer to the cluster.
B. A VIP is required when all endpoints connected to the cluster use agentless access.
C. A VIP is required when all endpoints connected to the cluster use the Junos Pulse client.
D. A VIP is required when all endpoints connected to the cluster use the Odyssey Access Client.
正解：B

質問 6：
Which two actions are available in the GUI for creating location awareness rules? (Choose two.)
A. IP reachability
B. DNS server
C. Resolve address
D. WINS server
正解：B,C