Juniper Junos Pulse Access Control, Specialist (JNCIS-AC) - JN0-314 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

You have an SRX Series Layer 2 enforcer providing 802.1X authentication for connected endpoints. Your security policy requires that users who fail their authentication be placed in a specific VLAN.
On the Layer 2 enforcer, at the [edit protocols dot1x authenticator interface] hierarchy for each participating interface, what provides this functionality?

A. server-fail-vlan B. guest-vlan C. server-reject-vlan D. auth-fail-vlan

Discussion 0

Correct Answer: C Vote an answer

Question 2

You are performing the initial setup of a new MAG Series device and have installed a valid CA-signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.
What are two explanations for this behavior? (Choose two.)

A. The MAG Series device's serial number needs to be configured on the SRX Series device. B. The SRX Series device must have a certificate signed by the same authority as the MAG Series device. C. The MAG Series device has multiple ports associated with the certificate. D. The MAG Series device and SRX Series device are not synchronized to an NTP server.

Discussion 0

Correct Answer: B,D Vote an answer

Question 3

A user reports an inability to access the Junos Pulse Access Control Service, but insists that the username and password are correct.
Which three tools on the Junos Pulse Access Control Service would you use to troubleshoot this issue? (Choose three.)

A. Session Recording B. TCP Dump C. NS Lookup D. Policy Trace E. User Access Log

Discussion 0

Correct Answer: B,D,E Vote an answer

Question 4

You need to configure your RADIUS server for use with an RSA server.
Which two elements must you configure to accomplish this goal? (Choose two.)

A. Called-Station-ID B. custom challenge expressions C. shared secret D. RADIUS accounting

Discussion 0

Correct Answer: B,C Vote an answer

Question 5

What information does the Junos Pulse Access Control Service provide to Security Threat Response Manager (STRM)? (Choose two.)

A. Session length B. User browser information C. User identity information D. Session IP address

Discussion 0

Correct Answer: C,D Vote an answer

Question 6

Which three features are supported with the Junos Pulse client? (Choose three.)

A. Host Checker B. IPsec C. soft tokens D. Host Enforcer E. third-party RADIUS support

Discussion 0

Correct Answer: A,B,C Vote an answer

Question 7

Your company requires using either a PC using a firewall and an antivirus program, or a Macintosh using OS X, prior to granting network access.
Which type of Host Checker policy would be used?

A. a single client-side policy with a custom rule B. a predefined Windows rule C. a custom regular expression D. a predefined Macintosh rule

Discussion 0

Correct Answer: A Vote an answer

Question 8

How would an end user add both a Junos Pulse Access Control Service URL and a Junos Pulse Secure Access Service URL to the same Junos Pulse client?

A. By adding one intranet Controller and one SA under the configuration hierarchy B. By adding two separate connections in the connections dialog box C. By adding two URLs under a connection in the connections dialog box D. By adding two separate intranet Controllers under the configuration hierarchy

Discussion 0

Correct Answer: B Vote an answer

Question 9

What are three Junos Pulse Access Control Service firewall enforcer policy components? (Choose three.)

A. return attribute B. Host Checker policy C. IPsec enforcement D. resource access policy E. auth table mapping

Discussion 0

Correct Answer: C,D,E Vote an answer

Question 10

A customer is trying to determine which client to deploy. The customer wants to be able to perform Layer 2 authentication as well as connect to the Junos Pulse Secure Access Service.
Which client should the customer deploy?

A. Odyssey Access Client B. Junos Pulse C. Network Connect D. Windows native supplicant

Discussion 0

Correct Answer: B Vote an answer

Question 11

You are attempting to configure source IP enforcement from the TRUST zone to the DATABASE zone on an SRX Series device. You would like to create a policy allowing the administrators to reach the database servers.
Which configuration would accomplish your objective?

A. security {
policies {
from-zone TRUST to-zone DATABASE {
policy admins {
match {
source-address any;
destination-address any;
application any; } then { permit; } } } } } B. security {
policies {
from-zone TRUST to-zone DATABASE {
policy admins {
match {
source-address any;
destination-address any;
application any;
}
then {
permit {
application-services {
uac-policy;
}
}
}
}
}
}
} C. security {
policies {
from-zone TRUST to-zone DATABASE {
policy admins {
match {
source-address any;
destination-address any;
application any;
}
then {
permit {
application-services;
}
} } } } } D. security {
policies {
from-zone TRUST to-zone DATABASE {
policy admins {
then {
permit {
application-services {
uac-policy;
}
}
}
}
}
}
}

Discussion 0

Correct Answer: B Vote an answer

Question 12

A customer has purchased a third-party switch to use for Layer 2 access with their Junos Pulse Access Control Service. When configuring the switch on the Junos Pulse Access Control Service, the customer does not find a make/model entry for it.
Which two actions should the customer take to make the switch work with the Junos Pulse Access Control Service? (Choose two.)

A. Add the switch to the Junos Pulse Access Control Service using the "Any" make/model. B. Add the switch to the Junos Pulse Access Control Service as a standard RADIUS. C. Obtain and configure the RADIUS dictionary for the switch and use that vendor listing for the make/model. D. Add the switch as a firewall enforcer.

Discussion 0

Correct Answer: B,C Vote an answer

Question 13

A company wants you to deploy the Junos Pulse Access Control Service in an environment with non-Juniper and Juniper firewalls. The customer also wants you to deploy firewall enforcement.
Which two steps are necessary to accomplish this goal? (Choose two.)

A. Configure the IP address of the Junos Pulse Gateway, password, and incoming interface in the Juniper firewalls. B. For the Juniper firewalls, type the name, password, and serial number, and select the platform on the Junos Pulse Access Control Service. C. For the non-Juniper firewalls, type the name, password, and serial number of the device and location group of 802.1X. D. In the firewalls, configure the incoming management interface to accept SSH, SSL, and ping requests.

Discussion 0

Correct Answer: A,B Vote an answer