Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 311:

  Which statement is true when express AV detects a virus in a TCP session?

  A. A TCP RST is sent and the session is restarted.

  B. The TCP connection is closed gracefully and the data content is dropped.

  C. TCP traffic is allowed and an SNMP trap is sent.

  D. AV scanning is restarted.

  Correct Answer: B

• Question 312:

  Which statement describes the behavior of a security policy?

  A. The implicit default security policy permits all traffic.

  B. Traffic destined to the device itself always requires a security policy.

  C. Traffic destined to the device's incoming interface does not require a security policy.

  D. The factory-default configuration permits all traffic from all interfaces.

  Correct Answer: C

• Question 313:

  Which statement is true about interfaces, zones, and routing-instance relationships?

  A. All interfaces in a zone must belong to the same routing instance.

  B. All interfaces in a routing instance must belong to the same zone.

  C. All interfaces in a zone must be in inet.0.

  D. Each interface in a VR must belong to a unique security zone.

  Correct Answer: A

• Question 314:

  What do you use to group interfaces with similar security requirements?

  A. zones

  B. policies

  C. address book

  D. NAT configuration

  Correct Answer: A

• Question 315:

  Which two statements are true for both express antivirus and full file-based antivirus? (Choose two.)

  A. Signature updates of the pattern database are obtained from Symantec.

  B. Intelligent prescreening functionality is identical in both express antivirus and full antivirus.

  C. Both express antivirus and full file-based antivirus use the same scan engines.

  D. The database pattern server is available through both HTTP and HTTPS.

  Correct Answer: BD

• Question 316:

  What are two valid match conditions for source NAT? (Choose two.)

  A. port range

  B. source port

  C. source address

  D. destination address

  Correct Answer: CD

• Question 317:

  Which two configuration elements are required for a policy-based VPN? (Choose two.)

  A. IKE gateway

  B. secure tunnel interface

  C. security policy to permit the IKE traffic

  D. security policy referencing the IPsec VPN tunnel

  Correct Answer: AD

• Question 318:

  How does the antivirus feature operate once the antivirus license has expired?

  A. Any traffic matching a UTM policy will be dropped.

  B. Any traffic matching a UTM policy will be permitted.

  C. Any traffic matching a UTM policy will be correctly evaluated with the existing set of antivirus signatures.

  D. Any traffic matching a UTM policy will be permitted with a log message of no inspection.

  Correct Answer: C

• Question 319:

  Which two traffic types trigger pass-through firewall user authentication? (Choose two.)

  A. SSH

  B. ICMP

  C. Telnet

  D. FTP

  Correct Answer: CD

• Question 320:

  What is the purpose of an address book?

  A. It holds security policies for particular hosts.

  B. It holds statistics about traffic to and from particular hosts.

  C. It defines the hosts in a zone so they can be referenced by policies.

  D. It maps hostnames to IP addresses to serve as a backup to DNS resolution.

  Correct Answer: C