单选题Given the configuration shown in the exhibit, what will happen to traffic from source 10.10.10.25 destined to 200.200.200.1?（）AThe traffic will be rejectedBThe traffic will be droppedCThe traffic will be forwardedDThe traffic will be policed

第1题：

第2题：

第3题：

第4题：

第5题：

Which statement describes the behavior of a security policy？（）

• A、The implicit default security policy permits all traffic.
• B、Traffic destined to the device itself always requires a security policy.
• C、Traffic destined to the device’s incoming interface does not require a security policy.
• D、The factory-default configuration permits all traffic from all interfaces.

第6题：

What are two examples of RE exception traffic?（）

• A、BGP updates that travel through the local router and are destined for a remote router.
• B、OSPF hello packets that are sent from a remote router and are destined for the local router.
• C、Telnet traffic that is sent from a remote host and is destined for the local router.
• D、Telnet traffic that travels through the local router and is destined for a remote end host.

第7题：

Given the configuration shown in the exhibit， which statement is true about traffic from host_ato host_b？（） [edit security policies from-zone HR to-zone trust] user@host# showpolicy two { match { source-address subnet_a； destination-address host_b； application [ junos-telnet junos-ping ]； } then { reject； } } policy one { match { source-address host_a； destination-address subnet_b； application any； } then { permit； } } host_a is in subnet_a and host_b is in subnet_b.

• A、DNS traffic is denied.
• B、Telnet traffic is denied.
• C、SMTP traffic is denied.
• D、Ping traffic is permitted

第8题：

You are designing a strategy to allow users to gain VPN access to the internal network.  What should you do？（）

• A、 Allow all inbound VPN traffic to pass through the internal firewall and the perimeter firewall.
• B、 Allow all inbound VPN traffic to pass through the perimeter firewall only.
• C、 Allow all VPN traffic from the source IP address of 131.107.1.14 to pass through the internal firewall.
• D、 Allow all VPN traffic from the source IP address of 191.168.1.0/24 to pass through the perimeter firewall.

第9题：

第10题：

第11题：

第12题：

第13题：

第14题：

第15题：

第16题：

Which descriptions of Netflow is correct？（）

• A、By default，Netflow records bidirectional IP traffic flow.
• B、Netflow answers questions regarding IP traffic：who，what，where，when，and how
• C、Netflow accounts for both transit traffic and traffic destined for the router.
• D、Netflow returns the subinterface information in the flow records.

第17题：

What statement about Transit AS is true？（）

• A、Traffic and prefixes originating from Source AS are carried across a Transit AS to reach theirdestination AS
• B、Traffic and prefixes originating from Transit AS are carried across a Stub AS to their destination AS
• C、Traffic and prefixes originating from Transit AS are carried across a Stub AS to their Source AS
• D、None of the above

第18题：

A firewall filter is applied as an input filter on a transit interface. What three types of traffic will this affect? （）

• A、inbound traffic transiting the router
• B、outbound traffic transiting the router
• C、traffic destined to the Routing Engine
• D、traffic destined to the interface address on which the filter is applied

第19题：

Which type of traffic will cause Policed Discards errors on an interface on a JUNOS device?（）

• A、Traffic that does not match any route in the forwarding table.
• B、Traffic that exceeds the bandwidth of the interface.
• C、Traffic of unsupported protocols on that interface.
• D、Traffic arriving on unknown virtual-circuits on that interface.

第20题：

第21题：

第22题：

第23题：