What are two operational capabilities of the Secure Application Manager client? (Choose two.)
A.
Automatically launches the client upon user browser initiated login.
B.
Controls access policy to network subnets and servers.
C.
Forces Java JRE update on SAM client installation.
D.
Restricts use of machine COM ports.
Explanation:
http://www.juniper.net/techpubs/en_US/junos-pulse3.0/topics/concepts/access-controlconnect-sa-role-configuring.html
In my opinion it is A,B. I have never seen SAM forcing Java update and I know it can be triggered by browser login.