Juniper Juniper Certifications JN0-332 Questions & Answers

• Question 81:

  Click the Exhibit button.

  

  The phase 1 tunnel of a site-to-site VPN is not establishing as shown in the exhibit. What would you do to resolve the problem on your SRX Series device?

  A. Change the remote side of the VPN to use the correct peering address

  B. Change the phase 1 mode from aggressive mode to main mode.

  C. Change the preshared key on both sides to matching values

  D. Change the phase 1 proposals to match on both sides of the IPsec VPN

  Correct Answer: C

• Question 82:

  Which two statements are correct about processing traffic entering an IPSec tunnel on an SRX Series device? (Choose two)

  A. A new IP header is added to the encrypted packet

  B. Only the payload of the original packet is encrypted.

  C. Security policies are evaluated before the route lookup.

  D. The original IP packet is encrypted

  Correct Answer: CD

• Question 83:

  Click the Exhibit button.

  

  Given the configuration shown in the exhibit, which statement is correct?

  A. If interface ge-0/0/2 goes down node 1 will take over as redundancy group 1 primary

  B. If interfaces ge-0/0/2 ge-0/0/3 and ge-0/0/4 go down, node 1 will take over as redundancy group 1 primary

  C. If interfaces ge-0/0/2 and ge-0/0/3 go down, node 1 will take over as redundancy group 1 primary.

  D. Node 1 will never take over as redundancy group 1 primary in this configuration.

  Correct Answer: B

• Question 84:

  You are asked to establish an IPsec VPN to a neighboring device that receives its external IP address from a DHCP server.

  Which feature must be used on an SRX Series device?

  A. Aggressive mode

  B. Transport mode

  C. Diffie-Hellman group 5

  D. Proxy ID

  Correct Answer: D

• Question 85:

  Click the Exhibit button.

  

  Referring to the exhibit, assume the node0 impairment was caused by a reth interface going down. When the interface comes back online, which statement would be correct?

  A. If node0 is configured with priority 200, it will take over as redundancy group 1 primary.

  B. If node0 is configured with priority 1. It will take over as redundancy group 1 primary.

  C. Node0 will take over as primary for redundancy group 1 regardless of node'1s priority.

  D. Node1 will stay primary for redundancy group 1 regardless of node0's priority.

  Correct Answer: D

• Question 86:

  Click the Exhibit button.

  

  Referring to the exhibit, you have added a logical interface to a new security zone on an SRX Series

  device.

  You received an error after issuing the commit command.

  What is causing the error?

  A. The new security zone must have a routing instance applied to it

  B. The new security zone must have more than one logical interface applied to it

  C. A management interface has not been applied to the security zone.

  D. The logical interface is applied to another security zone

  Correct Answer: D

• Question 87:

  You are testing a custom HTTP application and are required to open all ports for inbound host traffic to your SRX Senes device.

  Which configuration parameter would you use to meet this requirement?

  A. All

  B. Https

  C. Any-service

  D. Http

  Correct Answer: C

• Question 88:

  Which statement is true about high availability (HA) chassis clusters for the SRX Series device?

  A. Cluster nodes require an upgrade to HA compliant Routing Engines

  B. Cluster nodes must be connected through a Layer 2 switch

  C. You can have active/passive or active/active clusters

  D. HA clusters must use NAT to prevent overlapping subnets between the nodes

  Correct Answer: C

• Question 89:

  Click the Exhibit button.

  

  You are setting up a chassis cluster with two SRX240 devices with node0 as primary and node1 as secondary. You notice each node shows the other node as lost.

  Referring to the exhibit, which statement is correct?

  A. You must have redundancy-group 0 applied to a redundant interface for node0 and node1.

  B. You must add preempt to the redundancy-group 0 configuration for node0 and node1.

  C. You must remove the disable configuration from interface ge-0/GY4 for node0 and node1.

  D. You must have the same cluster ID for node0 and node1.

  Correct Answer: D

• Question 90:

  Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

  A. Scheduler

  B. pass-through authentication

  C. ALGs

  D. Counters

  Correct Answer: A