Juniper Juniper Certifications JN0-533 Questions & Answers

• Question 111:

  Which NAT has bidirectional translation by default?

  A. NAT-src

  B. NAT-dst

  C. VIP

  D. MIP

  Correct Answer: D

• Question 112:

  You are using interface-based NAT for traffic passing from the trust zone to the untrust zone. What will occur?

  A. The source IP address is not translated.

  B. The source IP address is translated to the trust interface IP address.

  C. The network address and port translation (NAPT) is performed on the loopback interface.

  D. The source IP address is translated to the untrust interface IP address.

  Correct Answer: D

• Question 113:

  You have configured a single-port VIP to forward HTTP traffic from the untrust interface on your ScreenOS device to an internal Web server. You have configured a policy to allow this traffic. Traffic from the untrust interface that matches this

  policy is unable to connect to the Web server.

  What is a solution to this problem?

  A. You must reboot the ScreenOS device for the VIP to become active.

  B. You must ensure the ScreenOS device has a route to the Web server.

  C. You must ensure the Web server is directly connected to the ScreenOS device.

  D. You must save the ScreenOS device configuration for the VIP to become active.

  Correct Answer: B

• Question 114:

  Which two statements are true about NAT? (Choose two.)

  A. Managed IP is one-to-one address mapping for bidirectional access.

  B. Mapped IP is one-to-one address mapping for bidirectional access.

  C. Dynamic IP is the public address that can be used for external access to your Web server.

  D. Dynamic IP is the public address that internal users can use to access the Internet.

  Correct Answer: BD

• Question 115:

  Your ScreenOS device is using NAT. Which NAT function allows you to use a single IP address from an untrust zone to communicate to multiple IP addresses in a trust zone?

  A. NAT-src with PAT enabled

  B. NAT-dst with PAT enabled

  C. NAT-src using a DIP pool with PAT enabled

  D. NAT-dst using a DIP pool with PAT disabled

  Correct Answer: B

• Question 116:

  You must translate a range of public IP addresses to a range of internal IP addresses. Which two mechanisms would you use to accomplish your objective? (Choose two.)

  A. MIP using masks

  B. VIP using masks

  C. policy-based NAT-dst

  D. policy-based NAT-src

  Correct Answer: AC

• Question 117:

  You have only one public IP address available and you must allow external access to three servers on a DMZ network. Which two NAT types would allow you to accomplish your objective? (Choose two.)

  A. MIP

  B. VIP

  C. NAT-dst

  D. NAT-src

  Correct Answer: BC

• Question 118:

  Your ScreenOS device is configured with multiple NAT types. What is the order of precedence in this situation?

  A. interface-based NAT -> VIP -> MIP -> policy-based NAT

  B. VIP -> MIP -> policy-based NAT -> interface-based NAT

  C. MIP -> VIP -> interface-based NAT -> policy-based NAT

  D. MIP -> VIP -> policy-based NAT -> interface-based NAT

  Correct Answer: D

• Question 119:

  You have the following BGP configuration in place to establish a session with a remote peer over your ethernet4 interface.

  set vrouter trust-vr protocol bgp 65000 set vrouter trust-vr protocol bgp enable set vrouter trust-vr protocol bgp neighbor remote-as 65500 set vrouter trust-vr protocol bgp neighbor enable

  Which additional statement is necessary to establish the session?

  A. set interface protocol bgp enable

  B. set interface ethernet4 bgp enable

  C. set vrouter trust-vr protocol bgp interface ethernet4

  D. set interface ethernet4 protocol bgp

  Correct Answer: D

• Question 120:

  You want to set up a last resort route and prevent route lookups in either the source-based routing table or the destination-based routing table. What should you do?

  A. Disable SIBR and create a default route in the trust-vr table using the null interface as the outgoing interface with a higher metric than other routes.

  B. Disable SIBR and create a default route in the trust-vr table using the null interface as the outgoing interface with a lower metric than other routes.

  C. Enable SIBR and create a default route in the SIBR table using the null interface as the outgoing interface with a higher metric than other routes.

  D. Enable SIBR and create a default route in the SIBR table using the null interface as the outgoing interface with a lower metric than other routes.

  Correct Answer: C