Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 221:

  Which configuration must be completed to use both packet-based and session-based forwarding on a branch SRX Series Services Gateway?

  A. A stateless firewall filter must be used on the ingress interface to match traffic to be processed as session based.

  B. A security policy rule must be used on the ingress interface to match traffic to be processed as session based.

  C. A global security policy rule must be used on the ingress interface to match traffic to be processed as packet based.

  D. A stateless firewall filter must be used on the ingress interface to match traffic to be processed as packet based.

  Correct Answer: D

• Question 222:

  The branch SRX Series Services Gateways implement the data plane on which two components? (Choose two.)

  A. IOCs

  B. SPCs

  C. CPU cores

  D. PIMs

  Correct Answer: CD

• Question 223:

  You have packet loss on an IPsec VPN using the default maximum transmission unit (MTU) where the packets have the DF-bit (do not fragment) set.

  Which configuration solves this problem?

  A. Set an increased MTU value on the physical interface.

  B. Set a reduced MSS value for VPN traffic under the [edit security flow tcp-mss] hierarchy.

  C. Set a reduced MTU value for VPN traffic under the [edit security flow] hierarchy.

  D. Set an increased MSS value on the st0 interface.

  Correct Answer: B

• Question 224:

  Which three parameters does the Junos OS attempt to match against during session lookup? (Choose three.)

  A. session token

  B. ingress interface

  C. protocol number

  D. source port number

  E. egress interface

  Correct Answer: ACD

• Question 225:

  How is the control plane separated from the data plane on branch SRX Series devices?

  A. by running separate kernels inside the Junos OS

  B. by dedicating a separate CPU core for the control plane

  C. by using separate CPUs for the control plane and data plane

  D. by offloading control plane traffic to the SPC

  Correct Answer: B

• Question 226:

  Which three elements are contained in a session-close log message? (Choose three.)

  A. source IP address

  B. DSCP value

  C. number of packets transferred

  D. policy name

  E. MAC address

  Correct Answer: ACD

• Question 227:

  Which card performs flow lookup on incoming packets on high-end SRX Series devices?

  A. Network Processing Card (NPC)

  B. Services Processing Card (SPC)

  C. Switch Control Board (SCB)

  D. Routing Engine (RE)

  Correct Answer: A

• Question 228:

  When the first packet in a new flow is received, which high-end SRX component is responsible for setting up the flow?

  A. Routing Engine

  B. I/O card

  C. network processing card

  D. services processing card

  Correct Answer: D

• Question 229:

  Which Junos security feature helps protect against spam, viruses, trojans, and malware?

  A. session-based stateful firewall

  B. IPsec VPNs

  C. security policies

  D. Unified Threat Management

  Correct Answer: D

• Question 230:

  Which statement correctly describes the default state of a high-end SRX Series Services Gateway?

  A. It forwards all traffic.

  B. It selectively forwards traffic based on default security policies.

  C. It selectively restricts traffic based on default security policies.

  D. It forwards no traffic.

  Correct Answer: D