Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 481:

  Which zone type can be specified in a policy?

  A. security

  B. functional

  C. user

  D. system

  Correct Answer: A

• Question 482:

  Which two parameters are configured in IPsec policy? (Choose two.)

  A. mode

  B. IKE gateway

  C. security proposal

  D. Perfect Forward Secrecy

  Correct Answer: CD

• Question 483:

  At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? (Choose two.)

  A. [edit security idp]

  B. [edit security zones security-zone trust interfaces ge-0/0/0.0]

  C. [edit security zones security-zone trust]

  D. [edit security screen]

  Correct Answer: BC

• Question 484:

  Click the Exhibit button.

  

  Which type of NAT is being used in the exhibit?

  A. no NAT

  B. destination NAT

  C. source NAT

  D. port address translation (PAT)

  Correct Answer: C

• Question 485:

  Which three advanced permit actions within security policies are valid? (Choose three.)

  A. Mark permitted traffic for firewall user authentication.

  B. Mark permitted traffic for SCREEN options.

  C. Associate permitted traffic with an IPsec tunnel.

  D. Associate permitted traffic with a NAT rule.

  E. Mark permitted traffic for IDP processing.

  Correct Answer: ACE

• Question 486:

  Which statement is true regarding the Junos OS for security platforms?

  A. SRX Series devices can store sessions in a session table.

  B. SRX Series devices accept all traffic by default.

  C. SRX Series devices must operate only in packet-based mode.

  D. SRX Series devices must operate only in flow-based mode.

  Correct Answer: A

• Question 487:

  What is the default session timeout for TCP sessions?

  A. 1 minute

  B. 15 minutes

  C. 30 minutes

  D. 90 minutes

  Correct Answer: C

• Question 488:

  Which three firewall user authentication objects can be referenced in a security policy? (Choose three.)

  A. access profile

  B. client group

  C. client

  D. default profile

  E. external

  Correct Answer: ABC

• Question 489:

  Which three methods of source NAT does the Junos OS support? (Choose three.)

  A. interface-based source NAT

  B. source NAT with address shifting

  C. source NAT using static source pool

  D. interface-based source NAT without PAT

  E. source NAT with address shifting and PAT

  Correct Answer: ABC

• Question 490:

  Under which Junos hierarchy level are security policies configured?

  A. [edit security]

  B. [edit protocols]

  C. [edit firewall]

  D. [edit policy-options]

  Correct Answer: A