[Free] Download New Latest (November) Juniper JN0-141 Actual Tests Topic 0 part 04

Ensurepass

QUESTION 31  (Topic 0)

 

If you include the domain administrator name and password when defining an AD/NT authentication server, what does this allow you to do?

 

A.

Allows the user to change their password on the AD/NT authentication server.

 

 

 

 

B.

Allows the Infranet Controller to change its password on the AD/NT authentication server.

C.

Allows the user to query the AD/NT authentication for user information for role mapping purposes.

D.

Allows the Infranet Controller to query the AD/NT authentication server for group information for role mapping purposes.

 

Answer: D

 

 

QUESTION 32  (Topic 0)

 

Which statement about outer authentication is true?

 

A.

Outer authentication is an encrypted exchange.

B.

Outer authentication is required for all EAP protocols.

C.

Outer authentication is initiated by the authentication server.

D.

Outer authentication proves the identity of the authentication server to the supplicant.

 

Answer: D

 

 

QUESTION 33  (Topic 0)

 

Which two statements about support for the Microsoft Network Access Protection (NAP) client are true? (Choose two.)

 

A.

Support includes Layer 2 and overlay enforcement.

B.

Implementation requires the use of a Microsoft Network Policy Server.

C.

The NAP agent is responsible for enforcing quarantine if the endpoint does not pass the Host Checker policy.

D.

IC-embedded Statement of Health Host Checker policies use endpoint scan results reported by the Windows Security Center.

 

Answer: CD

 

 

QUESTION 34  (Topic 0)

 

Which log contains information about service restarts, system errors, warnings, and requests to check server connectivity?

 

 

 

 

 

A.

Events log

B.

System log

C.

User Access log

D.

Admin Access log

 

Answer: A

 

 

QUESTION 35  (Topic 0)

 

Which statement is true about the operation of the overlay enforcer?

 

A.

It assigns users a set of roles.

B.

It enforces resource access policies.

C.

It verifies whether an endpoint meets security requirements.

D.

It configures the UAC agent to allow or deny access to resources.

 

Answer: B

 

 

QUESTION 36  (Topic 0)

 

Which method of user authentication is used by the Infranet Controller for IPsec enforcement?

 

A.

simple password

B.

IKE authentication

C.

XAUTH authentication

D.

shared IKE authentication

 

Answer: C

 

 

QUESTION 37  (Topic 0)

 

What is true about the enforcer’s auth table? (Assume the enforcer is running ScreenOS 6.1 or later.)

 

A.

Only contains entries for users that have been authenticated.

B.

Only contains entries for users actively accessing resources.

C.

Only contains entries for users that have been mapped to roles.

D.

Only contains entries for users that are defined in the local user database.

 

 

 

 

 

Answer: B

 

 

QUESTION 38  (Topic 0)

 

Which three statements about dynamic log filters are true? (Choose three.)

 

A.

Dynamic log filters create a query statement.

B.

Dynamic log filters can select any log field to filter.

C.

Dynamic log filters have an option to save the query.

D.

Dynamic log filters redisplay the log when you select a variable link.

E.

Dynamic log filters change the data the Infranet Controller saves in the log.

 

Answer: ACD

 

 

QUESTION 39  (Topic 0)

 

Of the network access issues listed below, which two are addressed by the UAC solution? (Choose two.)

 

A.

Prevent a host from being infected by a virus.

B.

Allow contractors to gain access to some, but not all, network resources.

C.

Prevent an authorized user from launching a denial of service attack on company resources.

D.

Allow visitors to a branch office to gain Internet access without compromising network security policies.

 

Answer: BD

 

 

QUESTION 40  (Topic 0)

 

Which configuration option can be set either in the initial console menu or the Admin UI of the Infranet Controller?

 

A.

VLAN ID

B.

Hostname

C.

Domain name

D.

Administrative timeout

 

Answer: C

 

Free VCE & PDF File for Juniper JN0-141 Actual Tests

Instant Access to Free VCE Files: CompTIA | VMware | SAP …
Instant Access to Free PDF Files: CompTIA | VMware | SAP …

This entry was posted in JN0-141 Actual Tests (November) and tagged , , , , , , . Bookmark the permalink.