Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 291:

  Which zone is a system-defined zone?

  A. null zone

  B. trust zone

  C. untrust zone

  D. management zone

  Correct Answer: A

• Question 292:

  Which two configuration options must be present for IPv4 transit traffic to pass between the ge- 0/0/0.0 and ge-0/0/2.0 interfaces? (Choose two.)

  A. family inet

  B. a security zone

  C. a routing instance

  D. host-inbound-traffic

  Correct Answer: AB

• Question 293:

  Which two configurations are valid? (Choose two.)

  A. [edit security zones] user@host# show security-zone red { interfaces { ge-0/0/1.0; ge-0/0/3.0; }} security-zone blue { interfaces { ge-0/0/2.0; ge-0/0/3.102; }}

  B. [edit security zones] user@host# show security-zone red { interfaces {

  ge-0/0/1.0;

  ge-0/0/2.0;

  }}

  security-zone blue {

  interfaces {

  ge-0/0/1.0;

  ge-0/0/3.0;

  }}

  C. [edit routing-instances] user@host# show red { interface ge-0/0/3.0; interface ge-0/0/2.102; } blue { interface ge-0/0/0.0; interface ge-0/0/3.0; }

  D. [edit routing-instances] user@host# show red { interface ge-0/0/3.0; interface ge-0/0/3.102; } blue { interface ge-0/0/0.0; interface ge-0/0/2.0; }

  Correct Answer: AD

• Question 294:

  Users can define policy to control traffic flow between which two components? (Choose two.)

  A. from a zone to the device itself

  B. from a zone to the same zone

  C. from a zone to a different zone

  D. from one interface to another interface

  Correct Answer: BC

• Question 295:

  By default, which condition would cause a session to be removed from the session table?

  A. Route entry for the session changed.

  B. Security policy for the session changed.

  C. The ARP table entry for the source IP address timed out.

  D. No traffic matched the session during the timeout period.

  Correct Answer: D

• Question 296:

  What is the purpose of a zone in JUNOS Software?

  A. A zone defines a group of security devices with a common management.

  B. A zone defines the geographic region in which the security device is deployed.

  C. A zone defines a group of network segments with similar security requirements.

  D. A zone defines a group of network segments with similar class-of-service requirements.

  Correct Answer: C

• Question 297:

  Which two functions of JUNOS Software are handled by the data plane? (Choose two.)

  A. NAT

  B. OSPF

  C. SNMP

  D. SCREEN options

  Correct Answer: AD

• Question 298:

  In JUNOS Software, which three packet elements can be inspected to determine if a session already exists? (Choose three.)

  A. IP protocol

  B. IP time-to-live

  C. source and destination IP address

  D. source and destination MAC address

  E. source and destination TCP/UDP port

  Correct Answer: ACE

• Question 299:

  Which three functions are provided by JUNOS Software for security platforms? (Choose three.)

  A. VPN establishment

  B. stateful ARP lookups

  C. Dynamic ARP inspection

  D. Network Address Translation

  E. inspection of packets at higher levels (Layer 4 and above)

  Correct Answer: ADE

• Question 300:

  A traditional router is better suited than a firewall device for which function?

  A. VPN establishment

  B. packet-based forwarding

  C. stateful packet processing

  D. Network Address Translation

  Correct Answer: B