Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 281:

  Click the Exhibit button.

  user@host> show interfaces ge-0/0/0.0 | match host-inbound Allowed host-inbound traffic : ping ssh telnet

  Which configuration would result in the output shown in the exhibit?

  A. [edit security zones security-zone trust] user@host# show host-inbound-traffic { system-services { ping; telnet; }} interfaces { ge-0/0/0.0 { host-inbound-traffic { system-services { ssh; telnet; }}}}

  B. [edit security zones functional-zone management] user@host# show interfaces { all; } host-inbound-traffic { system-services { all;

  ftp {

  except;

  }}}

  C. [edit security zones functional-zone management] user@host# show interfaces { all { host-inbound-traffic { system-services { ping; }}}} host-inbound-traffic { system-services { telnet; ssh; }}

  D. [edit security zones security-zone trust] user@host# show host-inbound-traffic { system-services { ssh; ping; telnet; }} interfaces { ge-0/0/3.0 { host-inbound-traffic { system-services { ping; }}} ge-0/0/0.0; }

  Correct Answer: D

• Question 282:

  Click the Exhibit button.

  user@host> show interfaces ge-0/0/0.0 | match host-inbound Allowed host-inbound traffic : bgp ospf

  Which configuration would result in the output shown in the exhibit?

  A. [edit security zones functional-zone management] user@host# show interfaces { ge-0/0/0.0 { host-inbound-traffic { protocols { bgp; ospf; vrrp; }}}} host-inbound-traffic { protocols { all; vrrp { except;

  }}}

  B. [edit security zones functional-zone management] user@host# show host-inbound-traffic { protocols { bgp; ospf; }}

  C. [edit security zones security-zone trust] user@host# show interfaces { ge-0/0/0.0 { host-inbound-traffic { protocols { ospf; bgp; }}}}

  D. [edit security zones security-zone trust] user@host# show host-inbound-traffic { protocols { bgp; }} interfaces { all { host-inbound-traffic { protocols { ospf; }}}}

  Correct Answer: C

• Question 283:

  Click the Exhibit button.

  [edit security zones security-zone HR]

  user@host# show

  host-inbound-traffic {

  system-services {

  ping;

  ssh;

  https;

  }}

  interfaces {

  ge-0/0/0.0;

  ge-0/0/1.0 {

  host-inbound-traffic {

  system-services {

  ping;

  }}}

  ge-0/0/2.0 {

  host-inbound-traffic {

  system-services {

  ping;

  ftp;

  }}}

  ge-0/0/3.0 {

  host-inbound-traffic {

  system-services {

  all;

  ssh {

  except;

  }}}

  }}

  All system services have been enabled.

  Given the configuration shown in the exhibit, which interface allows both ping and SSH traffic?

  A. ge-0/0/0.0

  B. ge-0/0/1.0

  C. ge-0/0/2.0

  D. ge-0/0/3.0

  Correct Answer: A

• Question 284:

  Click the Exhibit button.

  

  Based on the exhibit, client PC 192.168.10.10 cannot ping 1.1.1.2. Which is a potential cause for this problem?

  A. The untrust zone does not have a management policy configured.

  B. The trust zone does not have ping enabled as a host-inbound-traffic service.

  C. The security policy from the trust zone to the untrust zone does not permit ping.

  D. No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.

  Correct Answer: C

• Question 285:

  Click the Exhibit button.

  

  Referring to the exhibit, you are not able to telnet to 192.168.10.1 from client PC 192.168.10.10. What is causing the problem?

  A. Telnet is not being permitted by self policy.

  B. Telnet is not being permitted by security policy.

  C. Telnet is not allowed because it is not considered secure.

  D. Telnet is not enabled as a host-inbound service on the zone.

  Correct Answer: D

• Question 286:

  You are not able to telnet to the interface IP address of your device from a PC on the same subnet. What is causing the problem?

  A. Telnet is not being permitted by self policy.

  B. Telnet is not being permitted by security policy.

  C. Telnet is not allowed because it is not considered secure.

  D. Telnet is not enabled as a host-inbound service on the zone.

  Correct Answer: D

• Question 287:

  You want to create an out-of-band management zone and assign the ge-0/0/0.0 interface to that zone. From the [edit] hierarchy, which command do you use to configure this assignment?

  A. set security zones management interfaces ge-0/0/0.0

  B. set zones functional-zone management interfaces ge-0/0/0.0

  C. set security zones functional-zone management interfaces ge-0/0/0.0

  D. set security zones functional-zone out-of-band interfaces ge-0/0/0.0

  Correct Answer: C

• Question 288:

  You want to allow all hosts on interface ge-0/0/0.0 to be able to ping the device's ge- 0/0/0.0 IP address. Where do you configure this functionality?

  A. [edit interfaces]

  B. [edit security zones]

  C. [edit system services]

  D. [edit security interfaces]

  Correct Answer: B

• Question 289:

  Which two steps are performed when configuring a zone? (Choose two.)

  A. Define a default policy for the zone.

  B. Assign logical interfaces to the zone.

  C. Assign physical interfaces to the zone.

  D. Define the zone as a security or functional zone.

  Correct Answer: BD

• Question 290:

  Which type of zone is used by traffic transiting the device?

  A. transit zone

  B. default zone

  C. security zone

  D. functional zone

  Correct Answer: C