Which two statements are correct regarding the MAG6611 Junos Pulse Gateway in an active/active cluster configuration? (Choose two.)
A. Virtual IP (VIP) is available.
B. It supports up to two devices.
C. It supports up to four devices.
D. External load balancing is preferred.
Which Junos Pulse Secure Access Service component controls the user login URL mapping to the appropriate backend authentication service?
A. authentication server
B. authentication realm
C. resource policy
D. sign-in policy
Which two parameters are defined by a user role that customizes the appearance of the start page? (Choose two.)
A. file access
B. sign-in page layout
C. bookmarks
D. bookmark layout
You want to create a resource policy that permits access to multiple Web sites using wildcards.
Which two expressions meet the requirements for specifying the resources in this resource policy? (Choose two.)
A. http://site.mycompany.com
B. http://site%.mycompany.com
C. http://site*.mycompany.com
D. http://site!.mycompany.com
What are three valid syntax configurations when configuring VPN Tunneling Access Control Resources? (Choose three.)
A. 10.1.1.0/24
B. http://10.1.1.0/24
C. tcp://*:80,443
D. icmp://*:80,443
E. udp://10.1.1.0/24
You must plan the deployment of Junos Pulse to hundreds of end users on various client platforms including Windows laptops, smartphones running Google Android, and iPad users. What are three delivery methods that you would use to complete this task? (Choose three.)
A. Users can connect to the Secure Access Gateway Web portal and install Junos Pulse from the start page.
B. You can distribute a default installer to endpoints, install it, and let users create their own connections.
C. You can configure a Host Checker policy to detect if Junos Pulse is installed and deliver the installation to the endpoint during pre-authentication.
D. Smartphone users can download the Junos Pulse installer from the mobile application section of the Web portal start page.
E. You can create an .msi installer that contains connection settings and services along with the Junos Pulse installer and deliver this to endpoints using a software distribution process.
A customer wants to implement X.509 certificate authentication on their users. They want to extract the username from each certificate for accounting and single sign-on purposes. The correct username syntax lies within the common name portion of the certificate's subject field.
Which username template should you use on the certificate authentication server's configuration?
A.
B.
C.
D.
Which two types of traffic does the Host Checker connection control policy block on the client? (Choose two.)
A. all incoming TCP traffic
B. all outgoing TCP traffic
C. all outgoing DNS traffic
D. all incoming UDP traffic
A customer wants to verify that users satisfy a minimum Windows operating system and service pack (SP) level. Which type of endpoint security policy would be the simplest way to verify this?
A. Use a Host Checker policy with a rule type of "PredefineD. OS Checks."
B. Use a Host Checker policy with a rule type of "Custom: Patch Assessment."
C. Use a realm authentication policy to verify user-agent strings sent by the user's browser.
D. Use a role restriction policy to verify user-agent strings sent by the user's browser.
-- Exhibit ?
-- Exhibit -Referring to the exhibit, which statement is correct?
A. The user has attempted to sign in using an invalid authentication server.
B. A role-mapping rule has not been defined for the user.
C. The user has mistyped their username or password.
D. The authentication server that the user is authenticating to has rejected their credentials.
