显示标签为“JN0-331”的博文。显示所有博文
显示标签为“JN0-331”的博文。显示所有博文

2014年4月21日星期一

効率が良い問題集を利用してJuniper JN0-331認定試験に準備しょう

JuniperのJN0-331試験に受かるために一所懸命頑張って勉強していれば、あなたは間違っているのです。もちろん頑張って勉強するのは試験に合格することができますが、望ましい効果を達成できないかもしれません。現在はインターネットの時代で、試験に合格する ショートカットがたくさんあります。IT-Passports.comのJuniperのJN0-331試験トレーニング資料はとても良いトレーニング資料で、あなたが試験に合格することを保証します。この資料は値段が手頃だけでなく、あなたの時間を大量に節約できます。そうしたら、半分の労力で二倍の効果を得ることができます。

IT認定試験の中でどんな試験を受けても、IT-Passports.comのJN0-331試験参考資料はあなたに大きなヘルプを与えることができます。それは IT-Passports.comのJN0-331問題集には実際の試験に出題される可能性がある問題をすべて含んでいて、しかもあなたをよりよく問題を理解させるように詳しい解析を与えますから。真剣にIT-Passports.comのJuniper JN0-331問題集を勉強する限り、受験したい試験に楽に合格することができるということです。

試験番号:JN0-331問題集
試験科目:Juniper 「SEC,Specialist(JNCIS-SEC)」
問題と解答:全131問

IT-Passports.comはあなたが完全に信頼できるウェブサイトです。受験生の皆さんをもっと効率的な参考資料を勉強させるように、IT-Passports.comのIT技術者はずっとさまざまなIT認定試験の研究に取り組んでいますから、もっと多くの素晴らしい資料を開発し出します。一度IT-Passports.comのJN0-331問題集を使用すると、きっと二度目を使用したいです。IT-Passports.comは最高のJN0-331資料を提供するだけでなく、高品質のサービスも提供します。私達の資料についてどんなアドバイスがあってもお気軽に言ってください。受験生の皆さんを試験に合格させることを旨とするだけでなく、皆さんに最高のサービスを提供することも目標としています。

他のたくさんのトレーニング資料より、IT-Passports.comのJuniperのJN0-331試験トレーニング資料は一番良いものです。IT認証のトレーニング資料が必要としたら、IT-Passports.comのJuniperのJN0-331試験トレーニング資料を利用しなければ絶対後悔しますよ。IT-Passports.comのトレーニング資料を選んだら、あなたは一生で利益を受けることができます。

もしあなたはまだJuniperのJN0-331試験に合格するのために悩まればIT-Passports.comは今あなたを助けることができます。IT-Passports.comは高品質の学習資料をあなたを助けて優秀なJuniperのJN0-331会員の認証を得て、もしあなたはJuniper JN0-331の認証試験を通して自分を高めるの選択を下ろして、IT-Passports.comはとてもよい選択だと思います。

IT-Passports.comはきみのIT夢に向かって力になりますよ。JuniperのJN0-331の認証そんなに人気があって、IT-Passports.comも君の試験に合格するために全力で助けてあげて、またあなたを一年の無料なサービスの更新を提供します。明日の成功のためにIT-Passports.comを選らばましょう。

Juniperの認定試験は現在とても人気がある試験ですね。この重要な認証資格をもうすでに手に入れましたか。例えば、もう既にJN0-331認定試験を受験したのですか。もしまだ受験していないなら、はやく行動する必要がありますよ。こんなに大切な資格を取らなくてはいけないです。ここで言いたいのは、どのようにすれば効率的にJN0-331認定試験の準備をして一回で試験に合格できるのかということです。

購入前にお試し,私たちの試験の質問と回答のいずれかの無料サンプルをダウンロード:http://www.it-passports.com/JN0-331.html

NO.1 Which two statements about JUNOS Software packet handling are correct? (Choose two.)
A. JUNOS Software applies service ALGs only for the first packet of a flow.
B. JUNOS Software uses fast-path processing only for the first packet of a flow.
C. JUNOS Software performs route and policy lookup only for the first packet of a flow.
D. JUNOS Software applies SCREEN options for both first and consecutive packets of a flow.
Answer: CD

Juniper認定証   JN0-331   JN0-331   JN0-331

NO.2 What are two components of the JUNOS Software architecture? (Choose two.)
A. Linux kernel
B. routing protocol daemon
C. session-based forwarding module
D. separate routing and security planes
Answer: BC

Juniper   JN0-331   JN0-331

NO.3 Click the Exhibit button.
[edit groups]
user@host# show
node0 {
system {
host-name NODE0;
}
interfaces {
fxp0 {
unit 0 {
family inet {
address 1.1.1.1/24;
}
}
}
}
}
node1 {
system {
host-name NODE1;
}
interfaces {
fxp0 {
unit 0 {
family inet {
address 1.1.1.2/24;
}
}
}
}
}
In the exhibit, what is the function of the configuration statements?
A. This section is where you define all chassis clustering configuration.
B. This configuration is required for members of a chassis cluster to talk to each other.
C. You can apply this configuration in the chassis cluster to make configuration easier.
D. This section is where unique node configuration is applied.
Answer: D

Juniper認定試験   JN0-331   JN0-331   JN0-331   JN0-331

NO.4 Which two statements are true regarding proxy ARP? (Choose two.)
A. Proxy ARP is enabled by default.
B. Proxy ARP is not enabled by default.
C. JUNOS security devices can forward ARP requests to a remote device when proxy ARP is enabled.
D. JUNOS security devices can reply to ARP requests intended for a remote device when proxy ARP is
enabled.
Answer: BD

Juniper認証試験   JN0-331認定試験   JN0-331練習問題   JN0-331認定証   JN0-331認定資格

NO.5 By default, which condition would cause a session to be removed from the session table?
A. Route entry for the session changed.
B. Security policy for the session changed.
C. The ARP table entry for the source IP address timed out.
D. No traffic matched the session during the timeout period.
Answer: D

Juniper   JN0-331認証試験   JN0-331認定証   JN0-331過去問   JN0-331

NO.6 Regarding attacks, which statement is correct?
A. Both DoS and propagation attacks exploit and take control of all unprotected network devices.
B. Propagation attacks focus on suspicious packet formation using the DoS SYN-ACK-ACK proxy flood.
C. DoS attacks are directed at the network protection devices, while propagation attacks are directed at
the servers.
D. DoS attacks are exploits in nature, while propagation attacks use trust relationships to take control of
the devices.
Answer: D

Juniper   JN0-331認証試験   JN0-331認定証   JN0-331   JN0-331認定証   JN0-331

NO.7 Which two statements describe the difference between JUNOS Software for security platforms and a
traditional router? (Choose two.)
A. JUNOS Software for security platforms supports NAT and PAT; a traditional router does not support
NAT or PAT.
B. JUNOS Software for security platforms does not forward traffic by default; a traditional router forwards
traffic by default.
C. JUNOS Software for security platforms uses session-based forwarding; a traditional router uses
packet-based forwarding.
D. JUNOS Software for security platforms performs route lookup for every packet; a traditional router
performs route lookup only for the first packet.
Answer: BC

Juniper過去問   JN0-331   JN0-331参考書

NO.8 Users can define policy to control traffic flow between which two components? (Choose two.)
A. from a zone to the device itself
B. from a zone to the same zone
C. from a zone to a different zone
D. from one interface to another interface
Answer: BC

Juniper認定試験   JN0-331   JN0-331

NO.9 Click the Exhibit button.
[edit schedulers]
user@host# show
scheduler now {
monday all-day;
tuesday exclude;
wednesday {
start-time 07:00:00 stop-time 18:00:00;
}
thursday {
start-time 07:00:00 stop-time 18:00:00;
}
}
[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn myTunnel;
}
}
}
scheduler-name now;
Based on the configuration shown in the exhibit, what are the actions of the security policy?
A. The policy will always permit transit packets and use the IPsec VPN myTunnel.
B. The policy will permit transit packets only on Monday, and use the IPsec VPN Mytunnel.
C. The policy will permit transit packets and use the IPsec VPN myTunnel all day Monday and
Wednesday 7am to 6pm, and Thursday 7am to 6pm.
D. The policy will always permit transit packets, but will only use the IPsec VPN myTunnel all day Monday
and Wednesday 7am to 6pm, and Thursday 7am to 6pm.
Answer: C

Juniper問題集   JN0-331過去問   JN0-331   JN0-331練習問題   JN0-331認定資格

NO.10 Which two functions of JUNOS Software are handled by the data plane? (Choose two.)
A. NAT
B. OSPF
C. SNMP
D. SCREEN options
Answer: AD

Juniper過去問   JN0-331問題集   JN0-331認定試験   JN0-331参考書   JN0-331問題集   JN0-331

NO.11 Host A opens a Telnet connection to Host B. Host A then opens another Telnet connection to Host B.
These connections are the only communication between Host A and Host B. The security policy
configuration permits both connections.
How many flows exist between Host A and Host B?
A. 1
B. 2
C. 3
D. 4
Answer: D

Juniper   JN0-331認定証   JN0-331

NO.12 In JUNOS Software, which three packet elements can be inspected to determine if a session already
exists? (Choose three.)
A. IP protocol
B. IP time-to-live
C. source and destination IP address
D. source and destination MAC address
E. source and destination TCP/UDP port
Answer: ACE

Juniper   JN0-331参考書   JN0-331   JN0-331練習問題

NO.13 Which three functions are provided by JUNOS Software for security platforms? (Choose three.)
A. VPN establishment
B. stateful ARP lookups
C. Dynamic ARP inspection
D. Network Address Translation
E. inspection of packets at higher levels (Layer 4 and above)
Answer: ADE

Juniper   JN0-331参考書   JN0-331認定証

NO.14 A traditional router is better suited than a firewall device for which function?
A. VPN establishment
B. packet-based forwarding
C. stateful packet processing
D. Network Address Translation
Answer: B

Juniper参考書   JN0-331   JN0-331   JN0-331

NO.15 What is the default session timeout for UDP sessions?
A. 30 seconds
B. 1 minute
C. 5 minutes
D. 30 minutes
Answer: C

Juniper問題集   JN0-331認定証   JN0-331認定資格   JN0-331   JN0-331   JN0-331認定証

NO.16 What is the purpose of a zone in JUNOS Software?
A. A zone defines a group of security devices with a common management.
B. A zone defines the geographic region in which the security device is deployed.
C. A zone defines a group of network segments with similar security requirements.
D. A zone defines a group of network segments with similar class-of-service requirements.
Answer: C

Juniper過去問   JN0-331問題集   JN0-331参考書   JN0-331   JN0-331過去問

NO.17 Which two configurations are valid? (Choose two.)
A. [edit security zones]
user@host# show
security-zone red {
interfaces {
ge-0/0/1.0;
ge-0/0/3.0;
}
}
security-zone blue {
interfaces {
ge-0/0/2.0;
ge-0/0/3.102;
}
}
B. [edit security zones]
user@host# show
security-zone red {
interfaces {
ge-0/0/1.0;
ge-0/0/2.0;
}
}
security-zone blue {
interfaces {
ge-0/0/1.0;
ge-0/0/3.0;
}
}
C. [edit routing-instances]
user@host# show
red {
interface ge-0/0/3.0;
interface ge-0/0/2.102;
}
blue {
interface ge-0/0/0.0;
interface ge-0/0/3.0;
}
D. [edit routing-instances]
user@host# show
red {
interface ge-0/0/3.0;
interface ge-0/0/3.102;
}
blue {
interface ge-0/0/0.0;
interface ge-0/0/2.0;
}
Answer: AD

Juniper認定証   JN0-331認証試験   JN0-331過去問   JN0-331

NO.18 For IKE phase 1 negotiations, when is aggressive mode typically used?
A. when one of the tunnel peers has a dynamic IP address
B. when one of the tunnel peers wants to force main mode to be used
C. when fragmentation of the IKE packet is required between the two peers
D. when one of the tunnel peers wants to specify a different phase 1 proposal
Answer: A

Juniper   JN0-331参考書   JN0-331認定証   JN0-331

NO.19 Regarding zone types, which statement is true?
A. You cannot assign an interface to a functional zone.
B. You can specifiy a functional zone in a security policy.
C. Security zones must have a scheduler applied.
D. You can use a security zone for traffic destined for the device itself.
Answer: D

Juniper   JN0-331   JN0-331問題集   JN0-331問題集   JN0-331過去問   JN0-331問題集

NO.20 Which two statements describe the difference between JUNOS Software for security platforms and a
traditional router? (Choose two.)
A. JUNOS Software for security platforms supports NAT and PAT; a traditional router does not support
NAT or PAT.
B. JUNOS Software for security platforms secures traffic by default; a traditional router does not secure
traffic by default.
C. JUNOS Software for security platforms allows for session-based forwarding; a traditional router uses
packet-based forwarding.
D. JUNOS Software for security platforms separates broadcast domains; a traditional router does not
separate broadcast domains.
Answer: BC

Juniper認定試験   JN0-331   JN0-331問題集

受験生の皆様にもっと多くの助けを差し上げるために、IT-Passports.com のJuniperのJN0-331トレーニング資料はインターネットであなたの緊張を解消することができます。JN0-331 勉強資料は公式JuniperのJN0-331試験トレーニング授業 、JuniperのJN0-331 自習ガイド、JuniperのJN0-331 の試験と実践やJuniperのJN0-331オンラインテストなどに含まれています。IT-Passports.com がデザインしたJuniperのJN0-331模擬トレーニングパッケージはあなたが楽に試験に合格することを助けます。IT-Passports.comの勉強資料を手に入れたら、指示に従えば JN0-331認定試験に受かることはたやすくなります。

2014年3月29日星期六

IT-Passports.comはJuniper JN0-331 JN0-522 JN0-532 JN0-560 JN0-570 JN0-330試験の実践訓練を提供する

IT-Passports.comのJN0-331 JN0-522 JN0-532 JN0-560 JN0-570 JN0-330問題集は素晴らしい参考資料です。この問題集は絶対あなたがずっと探しているものです。これは受験生の皆さんのために特別に作成し出された試験参考書です。この参考書は短い時間で試験に十分に準備させ、そして楽に試験に合格させます。試験のためにあまりの時間と精力を無駄にしたくないなら、IT-Passports.comのJN0-331 JN0-522 JN0-532 JN0-560 JN0-570 JN0-330問題集は間違いなくあなたに最もふさわしい選択です。この資料を使用すると、あなたの学習効率を向上させ、多くの時間を節約することができます。

あなたのキャリアでいま挑戦に直面していますか。自分のスキルを向上させ、よりよく他の人に自分の能力を証明したいですか。昇進する機会を得たいですか。そうすると、はやくJN0-331 JN0-522 JN0-532 JN0-560 JN0-570 JN0-330認定試験を申し込んで認証資格を取りましょう。Juniperの認定試験はIT領域における非常に大切な試験です。JuniperJN0-331 JN0-522 JN0-532 JN0-560 JN0-570 JN0-330認証資格を取得すると、あなたは大きなヘルプを得ることができます。では、どのようにはやく試験に合格するかを知りたいですか。IT-Passports.comのJN0-331 JN0-522 JN0-532 JN0-560 JN0-570 JN0-330参考資料はあなたの目標を達成するのに役立ちます。

もちろん、試験に関連する資料を探しているとき、他の様々な資料を見つけることができます。しかし、調査や自分自身の試用の後、IT-Passports.comのJN0-331 JN0-522 JN0-532 JN0-560 JN0-570 JN0-330問題集が試験の準備ツールに最適であることはわかります。IT-Passports.comの資料は試験に準備する時間が十分ではない受験生のために特別に開発されるものです。それはあなたを試験に準備するときにより多くの時間を節約させます。しかも、IT-Passports.comのJN0-331 JN0-522 JN0-532 JN0-560 JN0-570 JN0-330問題集はあなたが一回で試験に合格することを保証します。また、問題集は随時更新されていますから、試験の内容やシラバスが変更されたら、IT-Passports.comは最新ニュースを与えることができます。

試験番号:JN0-331問題集
試験科目:Juniper 「SEC,Specialist(JNCIS-SEC)」
問題と解答:全131問

試験番号:JN0-522問題集
試験科目:Juniper 「FXV,Associate (JNCIA-FWV)」
問題と解答:全160問

試験番号:JN0-532問題集
試験科目:Juniper 「FWV,Specialist (JNCIS -FWV)」
問題と解答:全146問

試験番号:JN0-560問題集
試験科目:Juniper 「Certified Internet Associate.....」
問題と解答:全120問

試験番号:JN0-570問題集
試験科目:Juniper 「JN0-570 JNCIS-SSL EXAM」
問題と解答:全150問

試験番号:JN0-330問題集
試験科目:Juniper 「JN0-330-Enhanced Services, Specialist(JNCIS-ES)」
問題と解答:全150問

いつもあなたに最高のJN0-331 JN0-522 JN0-532 JN0-560 JN0-570 JN0-330認定試験に関連する試験参考書を与えられるために、IT-Passports.comは常に問題集の質を改善し、ずっと最新の試験のシラバスに応じて問題集を更新しています。現在の市場では、IT-Passports.comはあなたの最もよい選択です。長い間にわたって、IT-Passports.comは多くの受験生に認可されました。私を信じていないなら、周りの人々に聞いてみてもいいです。IT-Passports.comの試験問題集を利用したことがある人がきっといますから。IT-Passports.comは最優秀な試験JN0-331 JN0-522 JN0-532 JN0-560 JN0-570 JN0-330参考書を提供してあなたを試験に合格させることを保証します。

JuniperのJN0-331 JN0-522 JN0-532 JN0-560 JN0-570 JN0-330認定試験に受かるためにがんばって勉強していれば、IT-Passports.comはあなたにヘルプを与えます。IT-Passports.com が提供したJuniperのJN0-331 JN0-522 JN0-532 JN0-560 JN0-570 JN0-330問題集は実践の検査に合格したもので、最も良い品質であなたがJuniperのJN0-331 JN0-522 JN0-532 JN0-560 JN0-570 JN0-330認定試験に合格することを保証します。

購入前にお試し,私たちの試験の質問と回答のいずれかの無料サンプルをダウンロード:http://www.it-passports.com/JN0-330.html

NO.1 You want to create a policy allowing traffic from any host in the Trust zone to hostb.example.com
(172.19.1.1) in the
Untrust zone. How do you do create this policy?
A. Specify the IP address (172.19.1.1/32) as the destination address in the policy.
B. Specify the DNS entry (hostb.example.com.) as the destination address in the policy.
C. Create an address book entry in the Trust zone for the 172.19.1.1/32 prefix and reference this entry in
the policy.
D. Create an address book entry in the Untrust zone for the 172.19.1.1/32 prefix and reference this entry
in the policy.
Answer: D

Juniper認定試験   JN0-330   JN0-330

NO.2 Click the Exhibit button.
In the exhibit, what is the purpose of this OSPF configuration?
A. The router sends the file debugOSPF (containing hellos sent and LSA updates) to the syslog server.
B. The router traces both OSPF hellos sent and LSA updates, and stores the results in the debugOSPF
file.
C. The router traces both OSPF hellos sent and LSA updates, and sends the results to the syslog process
with the debugOSPF facility.
D. The router traces all OSPF operations, stores the results in the debugOSPF file, and marks both hellos
sent and LSAupdates in the file with a special flag.
Answer: B

Juniper   JN0-330   JN0-330

NO.3 A traditional router is better suited than a firewall device for which function?
A. VPN establishment
B. packet-based forwarding
C. stateful packet processing
D. network address translation
Answer: B

Juniper練習問題   JN0-330   JN0-330問題集   JN0-330認定試験   JN0-330練習問題   JN0-330認定資格

NO.4 Click the Exhibit button.
Based on the exhibit, client PC 192.168.10.10 cannot ping 1.1.1.2.
Which is a potential cause for this problem?
A. The untrust zone does not have a management policy configured.
B. The trust zone does not have ping enabled as host-inbound-traffic service.
C. The security policy from the trust zone to the untrust zone does not permit ping.
D. No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.
Answer: C

Juniper練習問題   JN0-330認証試験   JN0-330   JN0-330

NO.5 Which two statements regarding asymmetric key encryption are true? (Choose two.)
A. The same key is used for encryption and decryption.
B. It is commonly used to create digital certificate signatures.
C. It uses two keys: one for encryption and a different key for decryption.
D. An attacker can decrypt data if the attacker captures the key used for encryption.
Answer: BC

Juniper   JN0-330認定資格   JN0-330

NO.6 You are not able to telnet to the interface IP of your JUNOS software with enhanced services device
from a PC on the same subnet. What is causing the problem?
A. Telnet is not being permitted by self policy.
B. Telnet is not being permitted by security policy.
C. Telnet is not allowed because it is not considered secure.
D. Telnet is not enabled as a host-inbound service on the zone.
Answer: D

Juniper認定試験   JN0-330認定証   JN0-330   JN0-330   JN0-330

NO.7 Click the Exhibit button.
host_a is in subnet_a and host_b is in subnet_b.
Given the configuration shown in the exhibit, which statement is true about traffic from host_a to host_b?
A. DNS traffic is denied.
B. Telnet traffic is denied.
C. SMTP traffic is denied.
D. Ping traffic is permitted.
Answer: B

Juniper参考書   JN0-330   JN0-330認定試験

NO.8 Click the Exhibit button.
Based on the configuration shown in the exhibit, what will happen to the traffic matching the security
policy?
A. The traffic is permitted through the myTunnel IPSec tunnel only on Tuesdays.
B. The traffic is permitted through the myTunnel IPSec tunnel daily, with the exception of Mondays.
C. The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between
7:00 am and 6:00 pm, and Thursdays between 7:00 am and 6:00 pm.
D. The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between
6:01 pm and 6:59 am, and Thursdays between 6:01 pm and 6:59 am.
Answer: C

Juniper認定試験   JN0-330認定試験   JN0-330   JN0-330認定試験

NO.9 Using a policy with the policy-rematch flag enabled, what happens to the existing and new sessions
when you change the policy action from permit to deny?
A. The new sessions matching the policy are denied. The existing sessions are dropped.
B. The new sessions matching the policy are denied. The existing sessions, not being allowed to carry
any traffic, simply timeout.
C. The new sessions matching the policy might be allowed through if they match another policy. The
existing sessions are dropped.
D. The new sessions matching the policy are denied. The existing sessions continue until they are
completed or their timeout is reached.
Answer:A

Juniper   JN0-330認定証   JN0-330   JN0-330   JN0-330

NO.10 Which statement is true about interface-based static NAT?
A. It also supports PAT.
B. It requires you to configure address entries in the junos-nat zone.
C. It requires you to configure address entries in the junos-global zone.
D. The IP addresses being translated must be in the same subnet as the incoming interface.
Answer: D

Juniper認証試験   JN0-330認定試験   JN0-330認証試験   JN0-330   JN0-330認定資格

NO.11 Which parameters must you select when configuring operating system probes SCREEN options?
A. syn-fin, syn-flood, and tcp-no-frag
B. syn-fin, port-scan, and tcp-no-flag
C. syn-fin, fin-no-ack, and tcp-no-frag
D. syn-fin, syn-ack-ack-proxy, and tcp-no-frag
Answer: C

Juniper   JN0-330認定試験   JN0-330   JN0-330練習問題   JN0-330

NO.12 Which two are components of the enhanced services software architecture? (Choose two.)
A. Linux kernel
B. routing protocol daemon
C. session-based forwarding module
D. separate routing and security planes
Answer: BC

Juniper   JN0-330   JN0-330参考書   JN0-330認定試験

NO.13 In a JSRP cluster with two J6350 routers, the interface ge-7/0/0 belongs to which device?
A. This interface is a system-created interface.
B. This interface belongs to NODE0 of the cluster.
C. This interface belongs to NODE1 of the cluster.
D. This interface will not exist because J6350 routers have only six slots.
Answer: C

Juniper   JN0-330   JN0-330認証試験   JN0-330   JN0-330

NO.14 A route-based VPN is required for which scenario?
A. when the remote VPN peer is behind a NAT device
B. when multiple networks need to be reached across the tunnel
C. when the remote VPN peer is a dialup or remote access client
D. when a dynamic routing protocol such as OSPF is required across the VPN
Answer: D

Juniper   JN0-330   JN0-330   JN0-330

NO.15 Click the Exhibit button.
In the exhibit, which statement is correct?
A. Three physical interfaces are redundant.
B. You must define an additional Redundancy Group.
C. node 0 will immediately become primary in the cluster.
D. You must issue an operational command and reboot the system for the above configuration to take
effect.
Answer: D

Juniper練習問題   JN0-330   JN0-330   JN0-330   JN0-330

NO.16 Which command allows you to view the router's current priority for VRRP group 100 on interface
ge-0/0/1.0?
A. show vrrp
B. show vrrp group 100
C. show interfaces ge-0/0/1.0 vrrp group 100
D. show interfaces vrrp ge-0/0/1.0 group 100
Answer:A

Juniper認証試験   JN0-330   JN0-330   JN0-330参考書

NO.17 Which three security concerns can be addressed by a tunnel mode IPSec VPN secured by AH?
(Choose three.)
A. data integrity
B. data confidentiality
C. data authentication
D. outer IP header confidentiality
E. outer IP header authentication
Answer:ACE

Juniper   JN0-330   JN0-330   JN0-330練習問題   JN0-330

NO.18 You must configure a SCREEN option that would protect your router from a session table flood.
Which configuration meets this requirement?
A. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
icmp {
ip-sweep threshold 5000;
flood threshold 2000;
}
B. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
tcp {
syn-flood {
attack-threshold 2000;
destination-threshold 2000;
}
C. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
udp {
flood threshold 5000;
}
D. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
limit-session {
source-ip-based 1200;
destination-ip-based 1200;
}
Answer: D

Juniper   JN0-330認定資格   JN0-330   JN0-330   JN0-330

NO.19 Interface ge-0/0/2.0 of your router is attached to the Internet and is configured with an IP address and
network mask
of 71.33.252.17/24. A host with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. This
host isattached to the ge-0/0/0.0 interface of your router. You must use interface-based static NAT to
make the HTTP service on the host reachable from the Internet.
On which IP address and TCP port can Internet hosts reach the HTTP service?
A. IP address 10.10.10.1 and TCP port 8080
B. IP address 71.33.252.17 and TCP port 80
C. IP address 71.33.251.19 and TCP port 80
D. IP address 71.33.252.19 and TCP port 8080
Answer: D

Juniper認定試験   JN0-330認定試験   JN0-330

NO.20 Host A opens a Telnet connection to Host B. Host A then opens another Telnet connection to Host B.
These connections are the only communication between Host A and Host B. The security policy
configuration permits both connections. How many flows exist between Host A and Host B?
A. 1
B. 2
C. 3
D. 4
Answer: D

Juniper   JN0-330   JN0-330問題集   JN0-330   JN0-330

NO.21 Click the Exhibit button.
Which type of source NAT is configured in the exhibit?
A. static source pool
B. interface source pool
C. source pool with PAT
D. souce pool without PAT
Answer:A

Juniper認定試験   JN0-330参考書   JN0-330認定証   JN0-330   JN0-330練習問題

NO.22 Which two are components of the JUNOS software's routing policy? (Choose two.)
A. route-map
B. prefix-list
C. distribute-list
D. policy-statement
Answer: BD

Juniper認定証   JN0-330問題集   JN0-330

NO.23 Click the Exhibit button.
In the exhibit, what is the priority for Router B in VRRP group 100?
A. 1
B. 100
C. 110
D. 255
Answer: B

Juniper過去問   JN0-330   JN0-330問題集

NO.24 Which three parameters are configured in the IKE policy? (Choose three.)
A. mode
B. preshared key
C. external interface
D. security proposals
E. dead peer detection settings
Answer: ABD

Juniper問題集   JN0-330練習問題   JN0-330

NO.25 Users can define policy to control traffic flow between which two components? (Choose two.)
A. from a zone to the router itself
B. from a zone to the same zone
C. from a zone to a different zone
D. from one interface to another interface
Answer: BC

Juniper過去問   JN0-330過去問   JN0-330過去問

NO.26 Which two are characteristics of link-state routing protocols? (Choose two.)
A. Routers choose a best path for a destination based on the SPF algorithm.
B. All routers in a given area or level build a consistent database describing the network's topology.
C. Routers choose the best path for a destination based on the interface on which they received the link
stateadvertisement with the lowest cost.
D. All routers in a given area or level forward link state advertisements between interfaces in the same
area or level,
adding their metric to the link state advertisement's cost information when they forward it.
Answer:AB

Juniper   JN0-330   JN0-330

NO.27 In JUNOS software with enhanced services, which three packet elements are inspected to determine
if a session
already exists? (Choose three.)
A. IP protocol
B. IP time-to-live
C. source and destination IP address
D. source and destination MAC address
E. source and destination TCP/UDP port
Answer:ACE

Juniper認証試験   JN0-330認証試験   JN0-330過去問   JN0-330認定資格

NO.28 On which three traffic types does firewall pass-through authentication work? (Choose three.)
A. ping
B. FTP
C. Telnet
D. HTTP
E. HTTPS
Answer: BCD

Juniper   JN0-330認証試験   JN0-330   JN0-330問題集   JN0-330練習問題

NO.29 You want to enable SSH and Telnet access to the router's CLI. Under which configuration hierarchy
would you enable these protocols?
A. [edit system cli]
B. [edit security cli]
C. [edit system services]
D. [edit security services]
Answer: C

Juniper   JN0-330   JN0-330過去問