Pass4Test의 Juniper JNCIS JN0-332덤프를 공부하여 Juniper JNCIS JN0-332시험을 패스하는건 아주 간단한 일입니다.저희 사이트에서 제작한Juniper JNCIS JN0-332덤프공부가이드는 실제시험의 모든 유형과 범위가 커버되어있어 높은 적중율을 자랑합니다.시험에서 불합격시 덤프비용은 환불신청 가능하기에 안심하고 시험준비하시면 됩니다.
NO.1 Which statement is true about interfaces, zones, and routing-instance relationships?
A. All interfaces in a zone must belong to the same routing instance.
B. All interfaces in a routing instance must belong to the same zone.
C. All interfaces in a zone must be in inet.0.
D. Each interface in a VR must belong to a unique security zone.
Answer: A
NO.2 What are two valid match conditions for source NAT? (Choose two.)
A. port range
B. source port
C. source address
D. destination address
Answer: C,D
NO.3 You are creating a security policy on an SRX Series device with a permit action.
What are two possible actions the device also performs on matching traffic? (Choose two)
A. Send the traffic to a routing-instance.
B. Send the traffic to a logical system
C. Send the traffic to an IPSec tunnel
D. Send the traffic for IDP evaluation
Answer: A,C
NO.4 The local side of an IPSec VPN is an SRX Series device. The remote side of the IPSec VPN is a
third-party vendor and it is using a local proxy ID of 1.1.1.1/32 and a remote proxy ID of 2.2.2 2/32.
Which two actions would you take to ensure that the IPSec VPN comes up? (Choose two.)
A. Set the proxy ID to 1.1.1.1/32 for the local ID and 2.2.2.2/32 for the remote ID for the VPN
B. Set the proxy ID to 2.2.2.2/32 for the local ID and 1.1.1.1/322 for the remote ID for the VPN
C. Set the proxy ID to 0.0.0/0/0 for the local ID and 0.0.0.0/0 for the remote ID for the VPN
D. Set the proxy ID to 0.0.0.0/32 for the local ID and 0.0.0.0/32 for the remote ID for the VPN
Answer: B
NO.5 What are two benefits of enhanced Web filtering when configured on an SRX Series device?
(Choose two)
A. Local database storage minimizes processing delays
B. Real-time Web filtering on a local Websense server
C. More than 95 predefined categories stored on an Internet Websense server
D. Real-time URL categorization and site reputation information
Answer: A,C
NO.6 Click the Exhibit button.
[edit security]
user@host# show
zones {
security-zone ZoneA {
tcp-rst;
host-inbound-traffic {
system-services {
ping;
telnet;
}}
interfaces {
ge-0/0/0.0;
ge-0/0/1.0;
}}
security-zone ZoneB {
interfaces {
ge-0/0/3.0;
}}}
policies {
from-zone ZoneA to-zone ZoneB {
policy A-to-B {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}}}}
In the exhibit, a host attached to interface ge-0/0/0.0 sends a SYN packet to open a Telnet connection
to the device's ge-0/0/1.0 IP address.
What does the device do?
A. The device sends back a TCP reset packet.
B. The device silently discards the packet.
C. The device forwards the packet out the ge-0/0/1.0 interface.
D. The device responds with a TCP SYN/ACK packet and opens the connection.
Answer: B
NO.7 Which parameters are valid SCREEN options for combating operating system probes?
A. syn-fin, syn-flood, and tcp-no-frag
B. syn-fin, port-scan, and tcp-no-flag
C. syn-fin, fin-no-ack, and tcp-no-frag
D. syn-fin, syn-ack-ack-proxy, and tcp-no-frag
Answer: C
NO.8 Click the Exhibit button.
Based on the exhibit, client PC 192.168.10.10 cannot ping 1.1.1.2. Which is a potential cause for this
problem?
A. The untrust zone does not have a management policy configured.
B. The trust zone does not have ping enabled as a host-inbound-traffic service.
C. The security policy from the trust zone to the untrust zone does not permit ping.
D. No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.
Answer: C