Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 471:

  Which statement is true regarding NAT?

  A. NAT is not supported on SRX Series devices.

  B. NAT requires special hardware on SRX Series devices.

  C. NAT is processed in the control plane.

  D. NAT is processed in the data plane.

  Correct Answer: D

• Question 472:

  Which two functions of the Junos OS are handled by the data plane? (Choose two.)

  A. NAT

  B. OSPF

  C. SNMP

  D. SCREEN options

  Correct Answer: AD

• Question 473:

  When using UTM features in an HA cluster, which statement is true for installing the licenses on the cluster members?

  A. One UTM cluster license will activate UTM features on both members.

  B. Each device will need a UTM license generated for its serial number.

  C. Each device will need a UTM license generated for the cluster, but licenses can be applied to either member.

  D. HA clustering automatically comes with UTM licensing, no additional actions are needed.

  Correct Answer: B

• Question 474:

  Click the Exhibit button.

  

  In the exhibit, you decided to change my Hosts addresses.

  What will happen to the new sessions matching the policy and in-progress sessions that had already matched the policy?

  A. New sessions will be evaluated. In-progress sessions will be re-evaluated.

  B. New sessions will be evaluated. All in-progress sessions will continue.

  C. New sessions will be evaluated. All in-progress sessions will be dropped.

  D. New sessions will halt until all in-progress sessions are re-evaluated. In-progress sessions will be reevaluated and possibly dropped.

  Correct Answer: A

• Question 475:

  Which two statements about the use of SCREEN options are correct? (Choose two.)

  A. SCREEN options are deployed at the ingress and egress sides of a packet flow.

  B. Although SCREEN options are very useful, their use can result in more session creation.

  C. SCREEN options offer protection against various attacks at the ingress zone of a packet flow.

  D. SCREEN options examine traffic prior to policy processing, thereby resulting in fewer resources used for malicious packet processing.

  Correct Answer: CD

• Question 476:

  An IPsec tunnel is established on an SRX Series Gateway on an interface whose IP address was obtained using DHCP.

  Which two statements are true? (Choose two.)

  A. Only main mode can be used for IKE negotiation.

  B. A local-identity must be defined.

  C. It must be the initiator for IKE.

  D. A remote-identity must be defined.

  Correct Answer: BC

• Question 477:

  In a chassis cluster with two SRX 5800 devices, the interface ge-13/0/0 belongs to which device?

  A. This interface is a system-created interface.

  B. This interface belongs to node 0 of the cluster.

  C. This interface belongs to node 1 of the cluster.

  D. This interface will not exist because SRX 5800 devices have only 12 slots.

  Correct Answer: C

• Question 478:

  Which Web-filtering technology can be used at the same time as integrated Web filtering on a single branch SRX Series device?

  A. Websense redirect Web filtering

  B. local Web filtering (blacklist or whitelist)

  C. firewall user authentication

  D. ICAP

  Correct Answer: B

• Question 479:

  Which two statements about Junos software packet handling are correct? (Choose two.)

  A. The Junos OS applies service ALGs only for the first packet of a flow.

  B. The Junos OS uses fast-path processing only for the first packet of a flow.

  C. The Junos OS performs policy lookup only for the first packet of a flow.

  D. The Junos OS applies SCREEN options for both first and consecutive packets of a flow.

  Correct Answer: CD

• Question 480:

  The SRX device receives a packet and determines that it does not match an existing session. After SCREEN options are evaluated, what is evaluated next?

  A. source NAT

  B. destination NAT

  C. route lookup

  D. zone lookup

  Correct Answer: B