You have multiple realms configured on a MAG Series device. A user is authenticating with a nonJunos Pulse Access Control Service client. The username does not contain a realm suffix.
Which behavior will the user experience?

A customer is trying to determine which client to deploy. The customer wants to be able to perform
Layer 2 authentication as well as connect to the Junos Pulse Secure Access Service.
Which client should the customer deploy?

You are configuring an LDAP authentication server, and you want to configure role-mapping rules
based on group membership. When you attempt to search for groups in the server catalog, no
groups appear.
Assuming the LDAP server is reachable and functioning properly, in the admin GUI. Which two
parts of the configuration should you verify are correct? (Choose two.)

Before replacing a MAG Series device, using the admin GUI, you export two backup files,
system.cfg from “Maintenance” > “ImportfExport Configuration” and user.cfg from “Maintenance” >
“Import/Export Users”. When you receive the new hardware, you import all of the settings stored in

the system.cfg file (including the IP address, network configuration, and device certificates), but
you fail to import the user.cfg file.
Which three configuration areas were updated by system.cfg? (Choose three.)

You administer a network containing SRX Series firewalls. New policy requires that you implement
MAG Series devices to provide access control for end users. The policy requires that the SRX
Series devices dynamically enforce security policy based on the source IP address of the user.
The policy also requires that the users communicate with protected resources using encrypted
traffic.
Which two statements are true? (Choose two.)

Refer to the Exhibit.

A user logs in, is assigned the default role, and successfully loads the Host Enforcer policies
shown in the exhibit.
Which three statements are true? (Choose three.)

An outside vendor is eligible for the guest role and the contractor role when accessing your
network, that is secured with the Junos Pulse Access Control Service.
What is the default role-mapping behavior?

You want to create a security policy on an SRX240 that redirects unauthenticated users back to
the Junos Pulse Access Control Service.
Which two steps must you take to accomplish this task? (Choose two.)

Which three authentication resources are grouped within an authentication realm? (Choose three.)

A customer has purchased a new Junos Pulse Access Control Service and wants to install it in an
existing cluster. After initial configuration, the customer finds that the firmware version running on
the Junos Pulse Access Control Service is 4.1 r5, but the existing cluster is running firmware
version 4.1 r3.

Which two actions must be performed to allow the new Junos Pulse Access Control Service to
load the older version of firmware? (Choose two.)