Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 61:

  What is an example of single address translation (one-to-one)?

  A. Destination NAT with no pools

  B. Source NAT with no pools

  C. Interface source NAT

  D. Static NAT

  Correct Answer: D

• Question 62:

  Which two types of attacks does the SRX Series device identify using screens? (Choose two)

  A. Cross site scripting

  B. Reconnaissance

  C. Phishing

  D. Suspicious packets

  Correct Answer: BD

• Question 63:

  You want to configure one-to-one static mapping of IP addresses using an address pool without using PAT on an SRX Series device.

  Which source NAT option would you use?

  A. Interface-based source NAT

  B. Proxy ARP

  C. Address shifting

  D. Overflow pool

  Correct Answer: C

• Question 64:

  Which two statements are true regarding branch SRX Series devices? (Choose two)

  A. Branch SRX Series devices do not support MPLS.

  B. Branch SRX Series devices support MPLS.

  C. Branch SRX Series devices support packet-based and session-based forwarding simultaneously.

  D. Branch SRX Series devices do not support packet-based and session-based forwarding simultaneously.

  Correct Answer: BC

• Question 65:

  Which statement describes the function of NAT?

  A. NAT encrypts transit traffic in a tunnel.

  B. NAT detects various attacks on traffic entering a security device.

  C. NAT translates a public address to a private address.

  D. NAT restricts dynamic users individually or in a group.

  Correct Answer: C

• Question 66:

  What are two benefits of enhanced Web filtering when configured on an SRX Series device? (Choose two)

  A. Local database storage minimizes processing delays

  B. Real-time Web filtering on a local Websense server

  C. More than 95 predefined categories stored on an Internet Websense server

  D. Real-time URL categorization and site reputation information

  Correct Answer: AC

• Question 67:

  Which interface serves as a control link for a chassis cluster on an SRX Series device?

  A. fxp0

  B. fxp1

  C. fab

  D. reth

  Correct Answer: C

• Question 68:

  A packet that belongs to an existing session enters your SRX Series device. Your SRX Series device is operating in its default mode.

  Which two statements about ingress processing are true? (Choose two)

  A. The packet is subject to shaping operations.

  B. The packet is subject to stateless filters.

  C. The packet is processed through the fast path.

  D. The packet is processed through the first-packet path.

  Correct Answer: BC

• Question 69:

  When configuring a destination NAT rule, you notice that you are unable to configure the to match condition on an SRX Series device in this scenario, which two statements are correct? (Choose two)

  A. Destination NAT occurs before the zone lookup in the flow module

  B. Destination NAT occurs after the zone lookup in the flow module

  C. Destination NAT occurs after the route lookup in the How module

  D. Destination NAT occurs before the route lookup in the flow module

  Correct Answer: AD

• Question 70:

  What are two ways to manage all UTM features on an SRX Series device? (Choose two)

  A. Security Director

  B. Content Director

  C. NSM

  D. J-Web

  Correct Answer: AD