Juniper Juniper Certifications JN0-533 Questions & Answers

• Question 21:

  The master device in an NSRP cluster experiences an interface failure on a monitored interface. By default, what happens as a result of this failure?

  A. The device enters the Inoperable state.

  B. The device enters the IntFailure state.

  C. The device's NSRP priority is reduced by 255.

  D. The device's NSRP priority is reduced to 10 less than the primary backup.

  Correct Answer: A

• Question 22:

  Which three types of status can a member of an NSRP cluster have? (Choose three.)

  A. initial

  B. inactive

  C. down

  D. inoperable

  E. primary backup

  Correct Answer: ADE

• Question 23:

  Which two protocols are used for NSRP IP tracking? (Choose two.)

  A. ARP

  B. TCP

  C. UDP

  D. ICMP

  Correct Answer: AD

• Question 24:

  Which two statements are true about redundant interfaces on a ScreenOS device? (Choose two.)

  A. With two interfaces in a redundant interface, only one link is primary at any given time.

  B. On high-end models with multi-ASIC cards, redundant Ethernet ports must be in the same ASIC group.

  C. With two interfaces in a redundant interface, both links pass traffic at the same time.

  D. On high-end models with multi-ASIC cards, redundant Ethernet ports can be used on different ASIC groups.

  Correct Answer: AB

• Question 25:

  When a new session is created on the primary ScreenOS device, what are two results that happen on the backup device? (Choose two.)

  A. Session information is sent in real time from the master to the backup over the HA link.

  B. Session update messages are bundled together and sent over every 10 seconds to the backup over the HA link.

  C. A session is created on the backup device with a timeout value of 8 times the default.

  D. A session is created on the backup device and is completely identical to that of the master's session.

  Correct Answer: AC

• Question 26:

  You have created a site-to-site IPsec VPN between two devices. You want to keep the tunnel up at all times, even when no user traffic is using it. Which two configuration additions will accomplish this goal? (Choose two.)

  A. set vpn "RemoteVPN" monitor source-interface ethernet0/1 destination-ip

  B. set vpn "RemoteVPN" monitor source-interface ethernet0/1 destination-ip rekey

  C. set vpn "RemoteVPN" monitor source-interface ethernet0/1 destination-ip keepalive

  D. set vpn "RemoteVPN" monitor source-interface ethernet0/1 destination-ip rekey optimized

  Correct Answer: BD

• Question 27:

  You are using debug to determine which policy is used for Web traffic from host 10.20.1.5 to server 10.240.1.100. Which flow filter will only capture traffic related to this scenario?

  A. id:0 src ip 10.20.1.5 dst ip 10.240.1.100 id:1 src port 80

  B. id:0 src ip 10.240.1.100 dst ip 10.20.1.5 id:1 src port 80

  C. id:0 src ip 10.240.1.100 dst ip 10.20.1.5 dst port 80

  D. id:0 src ip 10.20.1.5 dst ip 10.240.1.100 dst port 80

  Correct Answer: D

• Question 28:

  HostA is in the Trust zone and has an IP address of. ServerA is a Web server in the DMZ zone and has an IP address of. Which three configuration statements are required to allow traffic from HostA to communicate with ServerA? (Choose three.)

  A. ssg5-> set address Trust HostA /32

  B. ssg5-> set policy from DMZ to Trust ANY ANY ANY permit

  C. ssg5-> set address DMZ ServerA /32

  D. ssg5-> set policy from Trust to DMZ HostA ServerA HTTP permit

  E. ssg5-> set address Trust HostA /32

  Correct Answer: CDE

• Question 29:

  Given the following output, what do you know about this session?

  id /s01,vsys 0,flag 18200450/4004/0083,policy 10,time 5, dip 0 module 0 if 14(nspflag 0905):10.10.10.10/51112->8.8.8.8/443,6,000000000000,sess token 44,vlan 990,tun 0,vsd 0,route 315,wsf 0 if 8(nspflag 0904):10.10.10.10/51112<-8.8.8.8/443,6,000000000000,sess token 36,vlan 991,tun 0,vsd 0,route 293,wsf 0

  A. The session was denied by policy ID 10.

  B. The session was permitted by policy ID 10.

  C. The protocol used for this session is UDP protocol 6.

  D. This session has already timed out and is pending cleanup out of the session table.

  Correct Answer: B

• Question 30:

  What is the default timeout for a fully established TCP session?

  A. 10 minutes

  B. 30 seconds

  C. 30 minutes

  D. 300 seconds

  Correct Answer: C