If you deploy Free Mobility, in the logic architecture of Free Mobility, which of the following options should be concerned by the administrator?

• A.Does the strategy deployment target a single user?
• B.Is the strategy automatically deployed?
• C.Choose the appropriate policy control point and user authentication point
• D.Does the strategy deployment target a single department?

Comment: *

Name: *

Email: *

Verification: *

In the terminal host check strategy, you can check whether the important subkeys and key values of the registry meet the requirements to control the terminal host's Access, which of the following check results will be recorded as violations? (multiple choice)

• A.The registry does not contain the mandatory requirements of the policy"Subkeys and key values".
• B.The registry contains the prohibited"Subkeys and key values"W
• C.The registry contains the mandatory requirements of the policy"Subkeys and key values",
• D.The registry does not contain any prohibited by this policy"Subkeys and key values"

Comment: *

Name: *

Email: *

Verification: *

A network adopts 802.1X to authenticate access users. The admission control device is deployed at the convergence layer. After the deployment is complete, the test-aaa command is used successfully on the admission control device, but the user can't access the network.
Which of the following may be the cause of the fault? (Multiple choices)

• A.The switch is not added to Agile Controller-Campus as NAS device.
• B.The 802.1X function is not enabled on the port on the access device.
• C.RADIUS authentication template is not configured on the aggregation layer device.
• D.Layer 2 links are used between access devices and aggregation devices. The 802.1X transparent transmission function is not enabled.

Comment: *

Name: *

Email: *

Verification: *

Check the policy delivered by the Agile Controller-Campus server on the switch as follows:
<SW>display acl all
Total nonempty ACL number is 3
Advanced ACL Auto PGM_OPEN_POLICY_3999 , 0 rule
Acl's step is 5
Ucl-group ACL Auto_PGM_U2 9996 , 1 rule
Acl's step is 5
rule 1 permit ip source ucl-group name Common_user destination ucl-group name Mail_Server(match-counter 0) Ucl-group ACL Auto_PGM_U1 9997 , 2 rules Acl's step is 5 rule 1 permit ip source ucl-group name VIP destination ucl-group name Mail_Server (match-counter 0) rule 2 permit ip source ucl-group name VIP destination ucl-group name Internet_WWW (match-counter 0) Ucl-group ACL Auto_PGM 9998 , 1 rule Acl's step is 5 rule 1 deny ip source ucl-group 0 (match-counter 0) Lid-group ACL Auto_PGM_PREFER_POLICY 9999 , 0 rule Acl's step is 5 Which of the following are correct for this strategy? (Multiple choices)

• A.Common_user users can access Internet_WWW resources.
• B.VIP users can access Internet_WWW resources.
• C.VIP can access Mail_Server resources.
• D.Common_user users can access Mail_Server resources.

Comment: *

Name: *

Email: *

Verification: *

Use hardware SACG access control, the result of viewing the session table on hardware SACG is as follows:
<FW>display firewall session table verbose:
tcpVPN: public-->public
Zone: untrust-->trust TTL: 00:10:00 Left: 00:05:27
Interface: GigabitEthernet0/0/1 NextHop:192.168.200.11 MAC:00-0c-29-d4-47-d2
<--packets: 316ytes:9516-->packets:33bytes:17277
192.168.0.119:1574-->192.168.200.11:15080
tcpVPN: public-->public
Zone: untrust-->trust TTL: 00:10:00 Left: 00:02:20
Interface: GigabitEthernet0/0/1 NextHop:192.168.100.1 MAC: 00-0c-29-a4-37-c2
<--packets:31bytes:9516-->packets:336ytes:17277
192.168.0.119:1671-->192.168.100.1:8443
Which of the following statements are correct? (Multiple choices)

• A.192.168.100.1 must be the controller IP address of Agile Controller-Campus.
• B.If the session 192.168.0.119:1574-->192.168.200.11:15080 is not refreshed within 6 minutes, the IP address is 192.168.0.119. If the device wants to communicate with the device whose IP address is 192.168.200.11, must must reestablish the session.
• C.If 192.168.200.11 is the server in the post-authentication domain, then the terminal with the IP address 192.168.0.119 may access the server if it is not authenticated.
• D.192.168.100.1 must be the manager IP address of Agile Controller-Campus.

Comment: *

Name: *

Email: *

Verification: *