Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 51:

  You are configuring an SRX Series device with policy rematching disabled. You change a permit policy to have an action of deny and commit the configuration.

  Which statement is true?

  A. All existing sessions are dropped and re-established.

  B. Existing sessions matching the policy are dropped and re-established.

  C. Existing sessions matching the policy continue uninterrupted.

  D. Existing sessions matching the policy are immediately dropped.

  Correct Answer: C

• Question 52:

  Which two statements are true regarding built-in applications on Junos SRX Series devices? (Choose two.)

  A. You can change the name of a built-in application through configuration.

  B. You can change the default timer values through configuration.

  C. You cannot change the default timer values through configuration.

  D. You cannot change the name of a built-in application through configuration.

  Correct Answer: CD

• Question 53:

  What does the set security screen ids-option protector icmp flood threshold 1500 command do?

  A. Once 1500 ICMP packets are received in a 10 second interval, it will ignore any additional ICMP traffic for the remainder of that interval and for the following 10 second interval.

  B. Once 1500 ICMP packets are received in a 10 second interval, it will ignore any additional ICMP traffic for the remainder of the 10 second interval.

  C. Once 1500 ICMP packets are received in a 1 second interval, it will start to monitor the offending source IP address.

  D. Once 1500 ICMP packets are received in a 1 second interval, it will ignore any additional ICMP traffic for the remainder of that second and the following second.

  Correct Answer: D

• Question 54:

  Which two types of traffic are affected by security policies on an SRX Series device? (Choose two)

  A. Transit traffic for an existing session

  B. Transit traffic for a new session

  C. Local inbound traffic not associated with the junos-host zone

  D. Local inbound traffic destined to the junos-host zone

  Correct Answer: AB

• Question 55:

  Your network administrator asked you to replace Node I of an SRX5800 chassis cluster running in an active/active mode. The administrator wants to know any impact this could cause.

  What should be considered during the hardware replacement?

  A. You would need to add a third RE to Node0 to handle the overload of traffic when Node I is taken offline.

  B. The two REs on Node0 might become overwhelmed when the third and fourth active REs are taken offline on Node1.

  C. Node0 might be disabled once it loses connectivity Node1.

  D. Some traffic might be impacted when the active interfaces transition from Node1 to Node0 and the sessions are reestablished.

  Correct Answer: B

• Question 56:

  You want to have a private server that multiple users can access from the Internet simultaneously. Which two NAT solutions would you configure on the SRX Series device? (Choose two.)

  A. Destination NAT with PAT enabled

  B. Source NAT with PAT enabled

  C. Destination NAT with PAT disabled

  D. Source NAT with address shifting enabled

  Correct Answer: CD

• Question 57:

  Which two statements are correct regarding the null zone on an SRX Series device? (Choose two)

  A. The null zone can be configured to accept host-outbound traffic.

  B. Interfaces not applied to any other zone are placed in the null zone.

  C. Only non-operational interfaces are placed in the null zone.

  D. All traffic is rejected to and from interfaces in the null zone.

  Correct Answer: BD

• Question 58:

  Which three criteria determine if a packet entering an SRX Series device belongs to an existing session? (Choose three)

  A. Source address

  B. Source port

  C. Destination address

  D. Incoming interface index

  E. Type of service

  Correct Answer: ABC

• Question 59:

  Which two statements are true about local host traffic on an SRX Series device? (Choose two)

  A. Outbound traffic sourced from an SRX Series device is always allowed by default.

  B. Routing protocol host inbound traffic is allowed by default.

  C. Routing protocol host inbound traffic is not allowed by default.

  D. Outbound traffic sourced from an SRX Series device must be configured under a zone ar interface.

  Correct Answer: AC

• Question 60:

  Which feature on the SRX Series device would be processed first for transit traffic?

  A. Zone

  B. NAT

  C. Screens

  D. Security policies

  Correct Answer: C