Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 111:

  Which statement is true about a logical interface?

  A. A logical interface can belong to multiple zones

  B. A logical interface can belong to multiple routing instances

  C. A logical interface can belong to only one routing instance

  D. All logical interfaces in a routing instance must belong to a single zone

  Correct Answer: C

• Question 112:

  Referring to the exhibit, which two statements are correct? (choose two)

  [edit security zones] user@host#show security-zone untrust {

  screen untrust-screen host-inbound-traffic { system-services { ssh; ping; } } Interfaces { ge-0/0/1.0 ge-0/0/3.0{ host-inboun d-traffic{ protocols { ospf; } } }

  A. An OSPF adjacency can e established on interface ge-0/0/3.

  B. AN OSPF adjacency can be established on both interfaces

  C. SSH can connect on interface ge-0/0/1

  D. Ping is not allowed on either interface

  Correct Answer: AC

• Question 113:

  What does a zone contain?

  A. Routers

  B. Interfaces

  C. Routing tables

  D. NAT Address

  Correct Answer: B

• Question 114:

  -- Exhibit -

  [edit security utm]

  user@host# show

  custom-objects {

  url-pattern {

  permit {

  value http://www.domain-abc.net;

  }

  deny {

  value http://www.domain-abc.net/movies;

  }

  }

  custom-url-category {

  whitelist {

  value permit;

  }

  blacklist {

  value deny;

  }

  }

  }

  feature-profile {

  web-filtering {

  url-whitelist whitelist;

  url-blacklist blacklist;

  type juniper-local;

  juniper-local {

  profile profileA {

  default block;

  custom-block-message "Website access not permitted";

  }

  }

  }

  }

  -- Exhibit -

  Click the Exhibit button.

  Your SRX Series device includes the Web filtering configuration shown in the exhibit.

  Assuming the Web filtering profile has been properly applied, what happens when a user attempts to

  access the Web site www.juniper.net through the SRX device?

  A. The HTTP request is blocked and the user's Web browser eventually times out.

  B. The HTTP request is blocked and a message is sent back to the user.

  C. The HTTP request is intercepted and the URL is sent to the Websense server. The SRX device permits or blocks the request based on the information it receives back from the server.

  D. The HTTP request is permitted and forwarded to the Web server.

  Correct Answer: B

• Question 115:

  -- Exhibit -[edit security utm feature-profile content-filtering] user@host# show

  profile profileA {

  block-content-type {

  exe;

  zip;

  }

  notification-options {

  type message;

  custom-message "Not permitted. illegal file type";

  }

  }

  -- Exhibit -

  Click the Exhibit button.

  Your SRX Series device includes the content filtering configuration shown in the exhibit.

  Assuming the content filtering profile has been properly applied, what happens when a user attempts to

  send a zip file through the SRX device using FTP?

  A. The file is blocked and silently dropped.

  B. The file is blocked and a message is sent back to the user.

  C. The file is permitted and forwarded to its destination, and a message is sent back to the user.

  D. The file is permitted and forwarded to its destination.

  Correct Answer: D

• Question 116:

  -- Exhibit

  

  -- Exhibit -Click the Exhibit button.

  Referring to the exhibit, you have just committed the UTM configuration.

  Which statement is correct?

  A. Intelligent prescreening is not configured.

  B. Sophos scanning is configured.

  C. Kaspersky scanning is configured.

  D. Intelligent prescreening is configured.

  Correct Answer: D

• Question 117:

  -- Exhibit

  

  -- Exhibit -Click the Exhibit button.

  You have configured antispam on your SRX Series device as shown in the exhibit.

  Assuming the antispam profile has been properly applied, what happens when an e-mail message arrives

  at the SRX device from [email protected] at IP address 150.150.150.10?

  A. The message matches the whitelist and is forwarded to the destination.

  B. The message matches the blacklist and is blocked.

  C. The message matches the blacklist and is forwarded to the destination with "SPAM:" automatically appended to the beginning of the e-mail subject line.

  D. The message matches both lists and is blocked because the device defaults to the more restrictive setting.

  Correct Answer: A

• Question 118:

  -- Exhibit

  

  -- Exhibit -Click the Exhibit button.

  You have configured antispam on your SRX Series device as shown in the exhibit.

  Assuming the antispam profile has been properly applied, what happens when an e-mail message arrives

  at the SRX device from [email protected] at IP address 150.10.10.10?

  A. The message matches the whitelist and is forwarded to the destination.

  B. The message matches the blacklist and is blocked.

  C. The message matches the blacklist and is forwarded to the destination with "SPAM:" automatically appended to the beginning of the e-mail subject line.

  D. The message matches both lists and is blocked because the SRX device defaults to the more restrictive setting.

  Correct Answer: B

• Question 119:

  -- Exhibit -- Exhibit -Click the Exhibit button. Referring to the exhibit, with Node 0 as primary for Redundancy Group (RG) 1, which action will the Junos

  

  OS chassis cluster take if interface ge-1/0/0 goes down?

  A. RG 1 will remain primary on Node 0.

  B. RG 1 will become primary to Node 1.

  C. RG 1 will become disabled.

  D. RG 1 will remove the interface from the redundancy group.

  Correct Answer: A

• Question 120:

  -- Exhibit -

  user@host# show chassis cluster

  reth-count 2;

  redundancy-group 1 {

  node 0 priority 200;

  node 1 priority 100;

  interface-monitor {

  ge-0/0/5 weight 85;

  ge-0/0/6 weight 85;

  ge-0/0/7 weight 85;

  ge-0/0/8 weight 85;

  ge-5/0/5 weight 85;

  ge-5/0/6 weight 85;

  ge-5/0/7 weight 85;

  ge-5/0/8 weight 85;

  }

  }

  -- Exhibit -

  Click the Exhibit button.

  Referring to the exhibit, you have two SRX Series devices in a chassis cluster, and Node 0 is currently the

  primary node. You want to ensure that traffic, using those interfaces, fails over to Node 1 when all

  interfaces go down.

  Which configuration change should be made to ensure failover to Node 1?

  A. Decrease the weight of the interfaces to 1.

  B. Increase the weight of the interfaces to 255.

  C. Increase the weight of the interfaces to between 86 and 128.

  D. Decrease the weight of the interfaces to between 64 and 84.

  Correct Answer: D