Juniper JN0-355 問題集

質問 1：
How are user role-mapping rules processed by the Junos Pulse Secure Access Service gateway?
A. All rules are processed in a top-down fashion for all eligible matches. If no match is found, the user is not allowed to sign into the realm.
B. All rules are processed in a top-down fashion for the best match. If no match is found, the user is assigned to the default role.
C. All rules are processed in a top-down fashion for the best match. If no match is found, the user is not allowed to sign in to the realm.
D. All rules are processed in a top-down fashion for all eligible matches. If no match is found, the user is assigned to the default role.
正解：B

質問 2：
You must create a self-signed certificate during an initial install.
What information must you provide? (Choose two.)
A. common name
B. organization name
C. public key
D. certificate signing request
正解：A,B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Your customer requires some users to be mapped to a specific role. The Active Directory (AD) administrator frequently changes users from one AD group to another.
Which role mapping rule type should you use?
A. the user's group membership returned by the realm's authentication server
B. the result of a host check rule for machine certificate
C. the user's username and NetBIOS name
D. the authentication realm accessed
正解：A

質問 4：
-- Exhibit -
Root::user1(patch management)[Web Users] - Start Policy [WEBURL/REWRITING] evaluation for
resource http://www.juniper.net:80/
Root::user1(patch management)[Web Users] - Applying Policy [Initial Rewrite Policy]...
Root::user1(patch management)[Web Users] - Action [Rewrite Content (auto-detect content type)]
is returned
Root::user1(patch management)[Web Users] - Policy [Initial Rewrite Policy] applies to resource
Root::user1(patch management)[Web Users] - Passthrough proxy policies are not applicable for
http://www.juniper.net
Root::user1(patch management)[Web Users] - Start Policy [WEBURL/ACCESS] evaluation for
resource http://www.juniper.net:80/
Root::user1(patch management)[Web Users] - Applying Policy [Web]...
Root::user1(patch management)[Web Users] - Evaluating Policy Rule 1...
Root::user1(patch management)[Web Users] - Resource filter [http://www.juniper.com:80/*] does
not match
Root::user1(patch management)[Web Users] - No Policy Rule applies to resource
Root::user1(patch management)[Web Users] - Applying Policy [Initial Open Policy]...
Root::user1(patch management)[Web Users] - User roles [Web Users] do not match with
configured roles [Exclusive:Web Users]
Root::user1(patch management)[Web Users] - No Policy applies to resource
Root::user1(patch management)[Web Users] - Start Auto Allow evaluation on WEBURL for
resource http://www.juniper.net:80/
Root::user1(patch management)[Web Users] - No Auto Allow resources configured
-- Exhibit --
A user should be able to access a Web resource but instead is receiving an error that access to the site is blocked.
Referring to the exhibit, which policy must be modified to allow access to the resource?
A. initial open policy
B. selective rewrite policy
C. pass-through proxy policy
D. initial rewrite policy
正解：D

質問 5：
-- Exhibit -
live - [127.0.0.1] Root::System()[] - License Server Protocol Error: Code=(0x23) Error="No Such Client"
-- Exhibit -
Referring to the exhibit, which two statements are correct? (Choose two.)
A. The lease client ID is not yet registered to the licensing server.
B. The lease client ID is not configured on the licensing server.
C. The lease client ID does not match to the one configured on the licensing server.
D. The time difference on the lease client and licensing server is more than 3600 seconds.
正解：B,C

質問 6：
As an administrator, what would you do to synchronize the state after configuring a license server on a virtual appliance?
A. Post the leasing state from the license server to the virtual appliance.
B. Push the leasing state from the license server to the virtual appliance.
C. Pull the leasing state from the license server on the virtual appliance.
D. Copy the leasing state from the license server on the virtual appliance.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 7：
-- Exhibit -
C:\Pasban Work\Cert Paper Exams\Juniper\JN0-355\86.bmp
-- Exhibit -
After performing the initial configuration, you browse to the Admin sign-in page for the first time and a certificate error is displayed as shown in the exhibit.
What is causing this error?
A. The device is using an SSL certificate that has expired.
B. The device certificate authority has been revoked.
C. The device is using a self-signed certificate.
D. The device certificate is using an invalid cipher.
正解：C

質問 8：
Which statement about Public Key Infrastructure (PKI) is true?
A. PKI specifies the use of a shared key.
B. PKI uses digital certificates to bind public keys to an entity.
C. PKI negotiates a secure connection between a client and a server.
D. PKI requires the use of a certificate authority and a registration authority.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 9：
You are logged in to the Junos Pulse Secure Access Service on your laptop using the wired connection on your docking station. You undock your machine and move over to a wireless network and your session does not reconnect.
Why did this happen?
A. The roaming session was disabled.
B. The persistent session was disabled.
C. The browser request follow through was disabled.
D. The enable session extension was disabled.
正解：A