Juniper JN0-355 問題集

質問 1：
You are implementing several Host Checker policies on your users, however, you must block access to a specific Web server when users fail one specific Host Checker policy.
Which Host Checker implementation allows you to satisfy this requirement?
A. Implement your Host Checker policy as an initial policy (pre sign-in).
B. Implement Host Checker policies at the user role where the users with different Web access requirements belong to different roles with different Host Checker policies defined.
C. Implement your Host Checker policy at the authentication realm to evaluate only.
D. Implement a Web access resource policy that contains a detailed rule with conditions on specific Host Checker policies as conditions for access.
正解：D

質問 2：
Which Junos Pulse Secure Access Service component controls the user login URL mapping to the appropriate backend authentication service?
A. authentication realm
B. authentication server
C. sign-in policy
D. resource policy
正解：C

質問 3：
You have just upgraded the Junos Pulse Secure Access Service, but now Host Checker is not operational. Host Checker functioned normally before the upgrade.
Which Host Checker setting should you verify is enabled in the Admin UI?
A. Perform dynamic policy reevaluation
B. Auto-update virus signatures list
C. Endpoint Security Assessment Plug-In (ESAP) versions
D. Auto-upgrade Host Checker
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A customer wants to verify that users satisfy a minimum Windows operating system and service pack (SP) level.
Which type of endpoint security policy would be the simplest way to verify this?
A. Use a role restriction policy to verify user-agent strings sent by the user's browser.
B. Use a Host Checker policy with a rule type of "PredefineD. OS Checks."
C. Use a Host Checker policy with a rule type of "Custom: Patch Assessment."
D. Use a realm authentication policy to verify user-agent strings sent by the user's browser.
正解：B

質問 5：
Which two statements about certificate-based authentication are true? (Choose two.)
A. Certificate-based authentication might require user input during the login process.
B. Certificate-based user authentication requires CRL.
C. Certificate-based user authentication requires OCSP with CRL as a backup.
D. Certificate attributes can be used to assign users to roles.
正解：A,D

質問 6：
You are asked to deploy Windows (RDP) and Citrix terminal services for a large financial firm. The customer requests that you enable role terminal service security settings.
In the Admin UI, which two restriction settings apply? (Choose two.)
A. Control wireless machine interface
B. Control client access to external drives
C. Control access to printers
D. Deny access to Oracle Expense reporting application
正解：B,C

質問 7：
You are asked to perform an automatic two-unit cluster upgrade.
Which action must you perform?
A. Upgrade both cluster nodes to the new software release.
B. Remove the backup node from the cluster prior to upgrading the code.
C. Delete all active user sessions.
D. Use Central Manager to perform the cluster upgrade.
正解：D

質問 8：
You are attempting to sign in to the Junos Pulse Secure Access Service and receive the error, You are not allowed to sign in.
Which two restrictions would cause this issue? (Choose two.)
A. You are not allowed to access resources.
B. You are missing a required client certificate.
C. The administrator forgot to assign you any roles.
D. You typed an invalid username or password.
正解：B,C

質問 9：
Which two types of traffic does the Host Checker connection control policy block on the client? (Choose two.)
A. all incoming UDP traffic
B. all outgoing DNS traffic
C. all outgoing TCP traffic
D. all incoming TCP traffic
正解：A,D
解説: (Topexam メンバーにのみ表示されます)