Pass4Test의 연구팀에서는  Juniper JNCIA JN0-522 인증덤프를 위하여 최선을 다하였습니다. Pass4Test 학습가이드  Juniper JNCIA JN0-522 덤프로 시험준비 하시면 시험이 쉬워집니다. Pass4Test에서 제공하는 문제와 답을 공부하시면 100% 시험에서 한방에 통과할것입니다. 여러분이 Juniper JNCIA JN0-522 시험에 응시하는데  Pass4Test의 도움을 받는다면 Pass4Test에서는 꼭 완벽한 자료를 드릴것을 약속합니다. 또한 일년무료 업데이트 서비스를 제공합니다.즉 문제와 답이 갱신이 되었을 경우 우리는 여러분들한테 최신버전의 문제와 답을 다시 보내드립니다.

 

Pass4Test는  여러분이 원하는  Juniper JNCIA JN0-522 시험관련자료를 해결해드릴 수 있는 사이트입니다. Pass4Test의 제품들은 모두 우리만의 거대한 IT업계 엘리트들로 이루어진 그룹 즉 관련업계예서 권위가 있는 전문가들이 자기만의 지식과 지금까지의 경험으로 최고의 IT인증 관련 자료를 만들어냅니다. Pass4Test의 문제와 답은 정확도 적중률이 아주 높습니다. 우리의 덤프로 완벽한   Juniper JNCIA JN0-522 시험대비를 하시면 됩니다.

 

 

NO.1 Click the Exhibit button. In the exhibit, if host A initiates a Web browsing session with host D, and the
E0/1 interface of the SSG 20 is in NAT mode, what will be the source address of the packet arriving at
host D?
A.10.1.1.1
B.10.1.10.5
C.143.45.56.1
D.143.45.56.254
Answer:C

NO.2 You enter the following command: set int e0/8 mip 1.1.8.32 host 10.1.10.32 netmask 255.255.255.255
How many MIP address translations have you just configured?
A.1
B.8
C.128
D.256
Answer:A

NO.3 Click the Exhibit button. In the exhibit, which routing command would allow host A to communicate with
host C? (Note: Assume a route from the SSG 20 to host A's subnet already exists.)
A.set route 0.0.0.0/0 int e0/3 gateway 177.11.56.254
B.set route 1.1.70.0 interface e0/3 gateway 177.11.56.254
C.configure route 1.1.70.0/24 gateway 177.11.56.254 int e0/3
D.set route 1.1.70.0/24 interface e0/3 gateway 177.11.56.254
Answer:D

NO.4 Assuming factory default settings, which statement describes the minimum requirements for WebUI
management access to the SSG 5?
A.Connect a PC addressed on the 192.168.1.0 subnet to any interface, open a browser and access
192.168.1.1.
B.Terminate the bootup sequence from the console device, open a browser on the console device and
access 192.168.1.1.
C.Connect a PC addressed on the 192.168.1.0 subnet, to the highest numbered interface and open a
browser and access 192.168.1.1.
D.Using the CLI, define an IP address on a physical interface, connect a PC to the interface and open a
browser to the interface address.
Answer:C

NO.5 What is the purpose of the VLAN1 interface?
A.It provides policy-based NAT for 802.1Q VLANs.
B.It provides an interface that can be used with 802.1Q VLANs in transparent mode.
C.It provides the ScreenOS device with a routable IP address while operating in route mode.
D.It provides an interface that can be used to remotely manage the ScreenOS device while operating in
transparent mode.
Answer:D

NO.6 Which ScreenOS CLI command would be useful for troubleshooting a policy deny?
A.get flow debug
B.debug flow basic
C.exec flow analysis
D.debug session basic
Answer:B

NO.7 Click the Exhibit button. In the exhibit, what is the correct command to configure a default route on the
SSG 20?
A.set route 0.0.0.0/0 vrouter untrust
B.set route 0.0.0.0/0 interface e0/4 gateway 143.45.56.254
C.set route 0.0.0.0/0 interface e0/4 next-hop 143.45.56.254
D.set route 0.0.0.0/0 interface 143.45.56.1 gate 143.45.56.254
Answer:B

NO.8 What needs to be configured in Phase 2 of a route-based VPN, that does not need to be configured in a
policy-based VPN?
A.proxy-id
B.tunnel-binding
C.transport mode
D.custom proposals
Answer:B

NO.9 What is the purpose of the "Permitted IP" address on a ScreenOS device?
A.It defines a list of addresses that are trusted to perform management on the ScreenOS device.
B.It is used in policy rules to determine which user traffic is allowed through the ScreenOS device.
C.It defines which range of addresses that can access devices connected to the ScreenOS device.
D.It is the address that an external device uses to gain management access to a ScreenOS device.
Answer:A

NO.10 Which statement is correct about tunnel interfaces?
A.They can have overlapping IP addresses.
B.They need to be configured in the zone where the protected resources reside.
C.They can be unnumbered and used in policy-based translations if the interface is in route mode.
D.They can be unnumbered from any interface residing on the same virtual router as the protected
resources.
Answer:D

NO.11 Which ScreenOS CLI policy statement keyword would enable a policy only during specified times, days,
and/or dates?
A.at
B.calendar
C.schedule
D.scheduler
Answer:C

NO.12 What are two benefits of configuring a ScreenOS device in transparent mode? (Choose two.)
A.There is no need to reconfigure the IP addresses of routers or protected servers.
B.There is no need to create MIPs or VIPs for incoming traffic to reach protected servers.
C.Policies are easier to create since you do not have to include source and destination IP addresses.
D.The product can support more VPNs and obtain greater throughput because there is less overhead to
manage.
Answer:A B

NO.13 Click the Exhibit button. Traffic from the Internet to the partner servers must use a VIP. In the exhibit,
what is true about the configuration of this feature?
A.You cannot use a VIP in this environment.
B.The VIP can be configured on the e0/4 interface.
C.The VIP can be configured in the Corporate or Internet zone using a different subnet than the physical
interface.
D.The VIP will work only if the destination ports in the incoming packet headers are mapped to the same
ports in the Corporate zone.
Answer:A

NO.14 Click the Exhibit button. In the exhibit, which two forms of address translation would have generated
the output shown? (Choose two.)
A.MIP
B.NAT-src with no DIP
C.Interface-based translation
D.NAT-src with a DIP, fixed-port disabled
Answer:B C

NO.15 Click the Exhibit button. In the exhibit, what is the correct address book entry for host C?
A.set address C 1.1.70.250/32
B.set address Partner C 1.1.70.250
C.set address Partner 1.1.70.250/32
D.set address Partner C 1.1.70.250/32
Answer:D

NO.16 Which ScreenOS CLI command would be used to view traffic logs?
A.get traffic
B.get log policy
C.get policy log
D.get log traffic
Answer:D

NO.17 You want to minimize the number of IP addresses, subnets, and policies in use. How should you
configure your tunnel interface?
A.Configure the tunnel interface with an IP address with a 32 bit subnet mask.
B.Configure the tunnel interface with an IP address with a 30 bit subnet mask.
C.Configure the tunnel interface as unnumbered and place the interface in the same zone as the
designated interface.
D.Configure the tunnel interface as unnumbered, but place the tunnel interface in a different zone than the
designated interface.
Answer:C

NO.18 Which ScreenOS CLI command is required to enable a policy during specified times, days, or dates?
A.set time
B.set clock
C.set calendar
D.set scheduler
Answer:D

NO.19 Your VPN tunnel does not pass traffic. You run the get ike cookie command and discover that there is no
cookie. Which two should be verified? (Choose two.)
A.routes
B.Phase 1 configuration options
C.Phase 2 configuration options
D.selected quick mode encryption algorithms
Answer:A B

NO.20 Which command can you use to view the log of IKE negotiations and results?
A.get event type 536
B.get ike cookie
C.get sa active
D.debug ike basic
Answer:A
 

 

Pass4Test의 덤프들은 응시자에 따라  시험 ,시험방법에 따라  알 맞춤한 퍼펙트한 자료입니다.여러분은 Pass4Test의 알맞춤 덤프들로 아주 간단하고 편하게  인증시험을 패스할 수 있습니다.많은  it인증관연 응시자들은  우리 Pass4Test가 제공하는 문제와 답으로 되어있는 덤프로 자격증을 취득하셨습니다.우리 Pass4Test 또한 업계에서 아주 좋은 이미지를 가지고 있습니다.