Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 331:

  Which URL database do branch SRX Series devices use when leveraging local Web filtering?

  A. The SRX Series device will download the database from an online repository to locally inspect HTTP traffic for Web filtering.

  B. The SRX Series device will use an offline database to locally inspect HTTP traffic for Web filtering.

  C. The SRX Series device will redirect local HTTP traffic to an external Websense server for Web filtering.

  D. The SRX Series administrator will define the URLs and their associated action in the local database to inspect the HTTP traffic for Web filtering.

  Correct Answer: D

• Question 332:

  Antispam can be leveraged with which two features on a branch SRX Series device to provide maximum protection from malicious e-mail content? (Choose two.)

  A. integrated Web filtering

  B. full AV

  C. IPS

  D. local Web filtering

  Correct Answer: B

• Question 333:

  Which three security policy actions are valid? (Choose three.)

  A. deny

  B. allow

  C. permit

  D. reject

  E. discard

  Correct Answer: ACD

• Question 334:

  Which operational mode command displays all active IKE phase 2 security associations?

  A. show ike security-associations

  B. show ipsec security-associations

  C. show security ike security-associations

  D. show security ipsec security-associations

  Correct Answer: D

• Question 335:

  In which two cases would you consider the TCP flag settings to be suspicious? (Choose two.)

  A. Do-Not-Fragment flag is set.

  B. Both SYN and FIN flags are set.

  C. Both ACK and PSH flags are set.

  D. FIN flag is set and ACK flag is not set.

  Correct Answer: BD

• Question 336:

  You want to ensure end-to-end data connectivity through an IPsec tunnel.

  Which feature would you activate?

  A. DPD

  B. VPN monitor

  C. perfect forward secrecy

  D. NHTB

  Correct Answer: B

• Question 337:

  Which statement is true about zone interface assignment?

  A. A logical interface can be assigned to a functional zone.

  B. A security zone must contain two or more logical interfaces.

  C. A logical interface can be assigned to multiple security zones.

  D. A logical interface can be assigned to a functional zone and a security zone simultaneously.

  Correct Answer: A

• Question 338:

  Which antivirus solution integrated on branch SRX Series devices do you use to ensure maximum virus coverage for network traffic?

  A. express AV

  B. full AV

  C. desktop AV

  D. ICAP

  Correct Answer: B

• Question 339:

  Which two statements about static NAT are true? (Choose two.)

  A. Static NAT can only be used with destination NAT.

  B. Static NAT rules take precedence over overlapping dynamic NAT rules.

  C. NAT rules take precedence over overlapping static NAT rules.

  D. A reverse mapping is automatically created.

  Correct Answer: BD

• Question 340:

  You have configured your chassis cluster to include redundancy group 1. Node 0 is configured to be the primary node for this redundancy group. You need to verify that the redundancy group failover is successful.

  Which command do you use to manually test the failover?

  A. request chassis cluster manual failover group 1 node 1

  B. request cluster failover redundancy-group 1 node 1

  C. request chassis cluster manual failover redundancy-group 1 node 1

  D. request chassis cluster failover redundancy-group 1 node 1

  Correct Answer: D