Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 381:

  Which command shows the event and traceoptions file for chassis clusters?

  A. show log chassisd

  B. show log clusterd

  C. show log jsrpd

  D. show log messages

  Correct Answer: C

• Question 382:

  You want to test a configured screen value prior to deploying.

  Which statement will allow you to accomplish this?

  A. [edit security screen] user@host# show ids-option untrust-screen { alarm-test-only; }

  B. [edit security screen] user@host# show ids-option untrust-screen {

  alarm-without-drop;

  }

  C. [edit security screen] user@host# show ids-option untrust-screen { alarm-no-drop; }

  D. [edit security screen] user@host# show ids-option untrust-screen { test-without-drop; }

  Correct Answer: B

• Question 383:

  What are three different integrated UTM components available on the branch SRX Series devices? (Choose three.)

  A. antivirus (full AV, express AV)

  B. antivirus (desktop AV)

  C. Web filtering

  D. antispam

  E. firewall user authentication

  Correct Answer: ACD

• Question 384:

  Which three actions can a branch SRX Series device perform on a spam e-mail message? (Choose three.)

  A. It can drop the connection at the IP address level.

  B. It can block the e-mail based upon the sender ID.

  C. It can allow the e-mail and bypass all UTM inspection.

  D. It can allow the e-mail to be forwarded, but change the intended recipient to a new e-mail address.

  E. It can allow the e-mail to be forwarded to the destination, but tag it with a custom value in the subject line.

  Correct Answer: ABE

• Question 385:

  Which two statements apply to policy scheduling? (Choose two.)

  A. An individual policy can have only one scheduler applied.

  B. You must manually configure system-time updates.

  C. Multiple policies can use the same scheduler.

  D. Policies that do not have schedulers are not active.

  Correct Answer: AC

• Question 386:

  Which three security concerns can be addressed by a tunnel mode IPsec VPN secured by ESP? (Choose three.)

  A. data integrity

  B. data confidentiality

  C. data authentication

  D. outer IP header confidentiality

  E. outer IP header authentication

  Correct Answer: ABC

• Question 387:

  Which three options represent IDP policy match conditions? (Choose three.)

  A. service

  B. to-zone

  C. attacks

  D. port

  E. destination-address

  Correct Answer: BCE

• Question 388:

  Which three functions are provided by the Junos OS for security platforms? (Choose three.)

  A. VPN establishment

  B. stateful ARP lookups

  C. Dynamic ARP inspection

  D. Network Address Translation

  E. inspection of packets at higher levels (Layer 4 and above)

  Correct Answer: ADE

• Question 389:

  Which configuration shows the correct application of a security policy scheduler?

  A. [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn myTunnel; } scheduler-name now; } } }

  B. [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn myTunnel; } } } scheduler-name now;

  }

  C. [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn myTunnel; scheduler-name now; } } } }

  D. [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; scheduler-name now; } then { permit { tunnel { ipsec-vpn myTunnel; } } } scheduler-name now; }

  Correct Answer: B

• Question 390:

  Which two statements are true regarding the system-default security policy [edit security policies default-policy]? (Choose two.)

  A. Traffic is permitted from the trust zone to the untrust zone.

  B. Intrazone traffic in the trust zone is permitted.

  C. All traffic through the device is denied.

  D. The policy is matched only when no other matching policies are found.

  Correct Answer: CD