Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 41:

  Click the Exhibit button Referring to the exhibit, what is the expected behavior?

  

  A. E-mail from juniper net will be blocked because juniper.net is on the blacklist.

  B. E-mail from jumper net will be permitted because juniper net is listed second on the blacklist.

  C. E-mail from nancy@juniper net will be permitted because [email protected] is on the whitelist.

  D. E-mail from [email protected] will be blocked because [email protected] is on the blacklist.

  Correct Answer: C

• Question 42:

  Click the Exhibit button.

  

  Which two statements are true regarding the output shown in the exhibit? (Choose two.)

  A. Scheduling has been configured for the policy

  B. A counter has been configured for the policy

  C. Session logging has been configured for the policy

  D. The policy is the third policy applied to the zone context

  Correct Answer: D

• Question 43:

  You want to enable antivirus scanning on your SRX Series device. You want a solution that will scan individual data packets by a hardware pattern-matching engine with minimal impact on performance.

  Which scanning method fulfils these requirements?

  A. Full file-based scanning

  B. Local list scanning

  C. Sophos live antimalware scanning

  D. Express scanning

  Correct Answer: D

• Question 44:

  Which two statements are correct regarding IPSec security associations on the SRX Series devices? (Choose two.)

  A. IPSec SAs are established during Phase 2 negotiations.

  B. IKE SA is bidirectional.

  C. IPSec SA is bidirectional.

  D. IKE SAs are established during Phase 2 negotiations.

  Correct Answer: AB

• Question 45:

  Which statement describes the function of screen options?

  A. Screen options encrypt transit traffic in a tunnel.

  B. Screen options protect against various attacks on traffic entering a security device.

  C. Screen options translate a private address to a public address.

  D. Screen options restrict or permit users individually or in a group.

  Correct Answer: B

• Question 46:

  Which two statements are true regarding SRX Series devices? (Choose two)

  A. High-end SRX Series use IOCs, NPCs. and SPCs for control plane operations.

  B. Session setup and maintenance is performed in the control plane.

  C. Session setup and maintenance is performed in the data plane.

  D. High-end SRX Series use IOCs, NPCs. and SPCs for data plane operations.

  Correct Answer: BD

• Question 47:

  What are two valid functions of the fabric interface in a chassis cluster? (Choose two)

  A. Synchronize configuration changes between Routing Engines.

  B. Send heartbeats between Routing Engines to verify availability.

  C. Pass inter node transit traffic in active/active topologies.

  D. Synchronize real-time objects (RTOs) between cluster members.

  Correct Answer: CD

• Question 48:

  Click the Exhibit button.

  

  Users are able to access hosts on the Internet, however, they are using the TO_INTERNET pool instead of the IP address associated with the external interface for the translations.

  Referring to the exhibit, why is the traffic using the source NAT pool instead of the IP address that is associated with the external interface for translations on the SRX Series device?

  A. The INTERNET-1 rule set is listed before the INTERNET-2 rule set in the configuration hierarchy.

  B. The INTERNET-2 rule set is not configured with a destination address of 0.0.0.0/0 in the match criterion.

  C. The INTERNET -l rule set is configured with the more specific from criterion.

  D. The INTERNET -2 rule set is configured with the more specific from criterion.

  Correct Answer: A

• Question 49:

  You have implemented NAT on your SRX Series device. You now want to be notified if the configured NAT pool is nearing its maximum usage capacity.

  Which two actions are required? (Choose two.)

  A. Enable SNMP.

  B. Enable the overflow pool tracking feature with the desired thresholds.

  C. Enable the pool utilization alarm feature with the desired thresholds.

  D. Enable RPM.

  Correct Answer: AC

• Question 50:

  You are creating a new security policy on your SRX Series device to control traffic entering a zone. What are three valid actions? (Choose three.)

  A. Reject

  B. Permit

  C. Discard

  D. Accept

  E. Deny

  Correct Answer: ABE