Question 161
Regarding machine certificate authentication, which two statements are true? (Choose two.)
A. The domain workstation logon certificate must be issued by the domain certificate authority.
B. The certificate must be self-signed by the Junos Pulse Access Control Service.
C. The root certificate (CA) must be in the Machine Trusted Certificate store.
D. The machine authentication license must be installed for Junos Pulse.
Answer: A,C
Question 162
Which three criteria are used in Location Awareness rules? (Choose three.)
A. DNS server
B. Host Checker
C. resolve address
D. endpoint address
E. Layer 3 enforcer
Answer: A,C,D
Question 163
You are deploying the Junos Pulse Access Control Service at a corporate campus. Agents are required to use 802.1X authentication. Due to security policy, the agent must also support localized resource policies.
Which type of agent should you use?
A. Odyssey Access Client
B. Junos Pulse
C. Host Checker
D. Java Agent
Answer: A
Question 164
Which two Junos Pulse Access Control Service client agents allow local logging on endpoint devices? (Choose two.)
A. Junos Pulse
B. Java agent
C. Odyssey Access Client
D. Dynamic VPN client
Answer: A,C
Question 165
Which statement is true about agentless access?
A. Agentless access requires an SRX Series device.
B. Agentless access requires the installation of a minimal client on endpoint devices.
C. Users must have administrative rights to use agentless access.
D. Endpoint security can be enforced using Host Checker.
Answer: D
Question 166
You want to set up Junos Pulse client connections that are activated automatically based on the
location of the endpoint.
Which two parameters would you use in Location Awareness rules? (Choose two.)
A. DNS server
B. VLAN ID
C. firewall name
D. IP address
Answer: A,D
Question 167
You are configuring a Junos Pulse client connection set on the Junos Pulse Access Control Service. You need the Junos Pulse client to automatically add new connections when new supported access gateways are encountered through the Web browser.
Which UI setting would you use to enable this automation?
A. Allow user connections
B. Location awareness
C. Dynamic connections
D. URL
Answer: C
Question 168
You are setting up Junos Pulse client access to your Junos Pulse Access Control Service. Due to security policy, you need to ensure clients can only connect to the service when they are connected to the corporate network.
Which configuration steps meet the requirement?
A. Configure Junos Pulse Location Awareness with DHCP server and endpoint protection options.
B. Configure Junos Pulse Location Awareness with DNS server and endpoint address options.
C. Configure Junos Pulse agentless access with DHCP server and endpoint protection options.
D. Configure Junos Pulse agentless access with DNS server and endpoint address options.
Answer: B
Question 169
You are deploying the Junos Pulse client to a new user who does not have Junos Pulse installed. You configure the Junos Pulse component set to use Minimal components. The user is unable to connect to any Junos Pulse Access Control Service devices.
What is causing the problem?
A. The connection the user is attempting to add must be configured with the All components option.
B. Junos Pulse Location Awareness is preventing the user from adding connections.
C. The user is unable to add any connections and the connection set is empty.
D. The Junos Pulse client must be configured locally with the Minimal components option.
Answer: C
Question 170
Which two statements are true about IP address pools when using IPsec tunnels through NAT devices? (Choose two.)
A. IP address pools must consist of a contiguous block of addresses.
B. IP address pools can consist of a list of noncontiguous IP addresses.
C. A single IP address pool can be associated with multiple enforcers.
D. Each enforcer requires a separate IP address pool.
Answer: A,C