Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 371:

  What are three valid Juniper Networks IPS attack object types? (Choose three.)

  A. signature

  B. anomaly

  C. trojan

  D. virus

  E. chain

  Correct Answer: ABE

• Question 372:

  Content filtering enables traffic to be permitted or blocked based on inspection of which three types of content? (Choose three.)

  A. MIME pattern

  B. file extension

  C. IP spoofing

  D. POP3

  E. protocol command

  Correct Answer: ABE

• Question 373:

  Antispam can be leveraged with which two features on a branch SRX Series device to provide maximum protection from malicious e-mail content? (Choose two.)

  A. integrated Web filtering

  B. full AV

  C. IPS

  D. local Web filtering

  Correct Answer: BC

• Question 374:

  Click the Exhibit button.

  

  Referring to the exhibit, which statement contains the correct gateway parameters?

  A. [edit security ike] user@host# show gateway ike-phase1-gateway { policy ike-policy1; address 10.10.10.1; dead-peer-detection { interval 20; threshold 5; } external-interface ge-1/0/1.0; }

  B. [edit security ike] user@host# show gateway ike-phase1-gateway { ike-policy ike-policy1; address 10.10.10.1; dead-peer-detection { interval 20; threshold 5; } external-interface ge-1/0/1.0; }

  C. [edit security ike] user@host# show gateway ike-phase1-gateway { policy ike1-policy; address 10.10.10.1; dead-peer-detection { interval 20; threshold 5; } external-interface ge-1/0/1.0; }

  D. [edit security ike] user@host# show gateway ike-phase1-gateway { ike-policy ike1-policy; address 10.10.10.1; dead-peer-detection { interval 20; threshold 5; } external-interface ge-1/0/1.0; }

  Correct Answer: B

• Question 375:

  Which two statements are true about the Websense redirect Web filter solution? (Choose two.)

  A. The Websense redirect Web filter solution does not require a license on the SRX device.

  B. The Websense server provides the SRX device with a category for the URL and the SRX device then matches the category with its configured polices and decides to permit or deny the URL.

  C. The Websense server provides the SRX device with a decision as to whether the SRX device permits or denies the URL.

  D. When the Websense server does not know the category of the URL, it sends a request back to the SRX device to validate against the integrated SurfControl server in the cloud.

  Correct Answer: AC

• Question 376:

  Which antivirus solution integrated on branch SRX Series devices do you use to ensure maximum virus coverage for network traffic?

  A. express AV

  B. full AV

  C. desktop AV

  D. ICAP

  Correct Answer: B

• Question 377:

  Which two types of attacks are considered to be denial of service? (Choose two.)

  A. zombie agents

  B. SYN flood

  C. IP packet fragments

  D. WinNuke

  Correct Answer: BD

• Question 378:

  Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A Web server with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. The Web server is attached to the ge-0/0/0.0 interface of your device. You must use NAT to make the Web server reachable from the Internet using port translation.

  Which type of NAT must you configure?

  A. source NAT with address shifting

  B. pool-based source NAT

  C. static destination NAT

  D. pool-based destination NAT

  Correct Answer: D

• Question 379:

  Which encryption type is used to secure user data in an IPsec tunnel?

  A. symmetric key encryption

  B. asymmetric key encryption

  C. RSA

  D. digital certificates

  Correct Answer: A

• Question 380:

  Which three contexts can be used as matching conditions in a source NAT configuration? (Choose three.)

  A. routing-instance

  B. zone

  C. interface

  D. policy

  E. rule-set

  Correct Answer: ABC