Online Access Free JN0-355 Exam Questions

Which two statements are true about Online Certificate Status Protocol (OCSP)? (Choose two.)

• A.The Junos Pulse Secure Access Service is an OCSP client.
• B.The Revocation Checking option must be disabled in OCSP.
• C.OCSP must have the Allow Clock Discrepancy field set to zero.
• D.OCSP provides real-time certificate verification.

What are three reasons for using certificates? (Choose three.)

• A.for server authentication
• B.for ESP negotiation
• C.for user authentication
• D.for role mapping
• E.to acquire an IP address

A customer wants to implement X.509 certificate authentication on their users. They want to extract the username from each certificate for accounting and single sign-on purposes. The correct username syntax lies within the common name portion of the certificate's subject field.
Which username template should you use on the certificate authentication server's configuration?

• A.<certDN.CN>
• B.<certDN.SN>
• C.<certAttr.altName.SN>
• D.<certAttr.altName.CN>

Which statement is correct about VPN tunneling clients?

• A.Network Connect supports the use of client certificates on smart phones and PDAs.
• B.Junos Pulse supports the use of client certificates on iOS and Android OS devices.
• C.Network Connect supports the use of client certificates on Windows and Linux systems only.
• D.The Junos Pulse client supports the use of client certificates on Windows systems only.

Which sequence describes the processing order when a user authenticates to a Junos Pulse Secure Access Service?

• A.sign-in policies, authentication realms, roles, resource policies
• B.sign-in policies, resource policies, roles, authentication realms
• C.sign-in policies, authentication realms, resource policies, roles
• D.sign-in policies, roles, authentication realms, resource policies