Juniper Juniper Certifications JN0-533 Questions & Answers

• Question 81:

  Referring to the exhibit, what is the appropriate VPN monitor status?

  

  A. The VPN is active and the peer is down.

  B. The VPN is active and VPN Monitor is not configured for the peer.

  C. The VPN is active and the peer is up.

  D. The VPN is inactive and VPN Monitor is not configured for the peer.

  Correct Answer: B

  Explanation:

  "A/-" shows the VPN active, but monitor is unavailable (likely because the other end is not a screenOS device)

• Question 82:

  Referring to the exhibit, what does the log show?

  

  A. The device is using VIP.

  B. The device is using DIP ID 4.

  C. The device is using source NAT.

  D. The device is using destination NAT.

  Correct Answer: C

  Explanation:

  The source IP of the outgoing packets is not the same as the destination IP of the incoming responses.

• Question 83:

  Referring to the output shown in the exhibit, which NAT configuration is being used?

  

  A. interface-based NAT

  B. DIP

  C. source-based NAT

  D. VIP

  Correct Answer: D

  Explanation:

  You can see packet originally aimed at 2.2.2.2 and then the destination changes to 192.168.1.4

• Question 84:

  In the exhibit, eth3/1 is in the client-vr virtual router and eth3/2 is in the server-vr virtual router. Your policies permit all traffic between all zones. You want to ensure Client1 can contact Server1. In this scenario, which two statements are true? (Choose two.)

  

  A. By default, all interface routes are automatically imported into all virtual routers.

  B. You can configure a static route for Server1 in the client-vr virtual router that points to eth3/2.

  C. You can configure a static route for Server1 in the client-vr virtual router that points to the server-vr virtual router.

  D. You can configure a route export policy to export the route for Server1 to the client-vr virtual router.

  Correct Answer: CD

• Question 85:

  You are the administrator of a NetScreen 5GT. For troubleshooting purposes, you must be able to ping untrusted interfaces. Referring to the exhibit, how do you enable ping for interface eth2?

  ns5gt-> get int eth2 Interface ethernet2: description ethernet2 number 8, if_info 704, if_index 0, mode route link up, phy-link up/full-duplex status change:7, last change:09/26/2012 23:08:22 vsys Root, zone Untrust, vr trust-vr dhcp client disabled PPPoE disabled admin mtu 0, operating mtu 1500, default mtu 1500 *ip 171.211.111.111/30 mac 0014.f693.edc8 *manage ip 171.211.111.111, mac 0014.f693.edc8 route-deny disable pmtu-v4 disabled ping disabled, telnet enabled, SSH disabled, SNMP disabled web enabled, ident-reset disabled, SSL disabled DNS Proxy disabled, webauth disabled, g-arp enabled, webauth-ip 0.0.0.0 OSPF disabled BGP disabled RIP disabled RIPng disabled mtrace disabled PIM: not configured IGMP not configured MLD not configured NHRP disabled bandwidth: physical 100000kbps, configured egress [gbw 0kbps mbw 0kbps] configured ingress mbw 0kbps, current bw 0kbps total allocated gbw 0kbps DHCP-Relay disabled at interface level DHCP-server disabled

  A. ns5gt-> unset int eth2 manage-ip ping

  B. ns5gt-> set int eth2 manage ping

  C. ns5gt-> enable int eth2 manage ping

  D. ns5gt-> set int eth2 manage-ip ping

  Correct Answer: B

• Question 86:

  User1 wants to create the policy in the ScreenOS device, but is not successful. Referring to the exhibit, what is the problem?

  set admin name "admin" set admin password "nOsYMqrbAs/McFsJrs6HwcIt3AF6yn" set admin user "User1" password "nLZwKErINPPCcphC6sFMXrJ" privilege "read-only" set admin port 8080 set admin access attempts 5 set admin access lock-on-failure 5 set admin auth web timeout 10 set admin auth server "Local"

  A. The User1 account has been suspended.

  B. User1 does not have any account in this device.

  C. User1 logged in to the device with wrong port.

  D. User1 does not have the proper permission to create a policy.

  Correct Answer: D

• Question 87:

  You are the administrator of a NetScreen 5GT. The system administrator cannot use SSH to log in to the NetScreen 5GT. Referring to the exhibit, what is the problem?

  SSH V2 is active ns5gt-> get int et1 Interface ethernet1: description ethernet1 number 2, if_info 176, if_index 0, mode nat link up, phy-link up/full-duplex status change:1, last change:02/06/1997 18:02:32 vsys Root, zone Trust, vr trust-vr dhcp client disabled PPPoE disabled admin mtu 0, operating mtu 1500, default mtu 1500 *ip 192.168.1.1/24 *manage ip 192.168.1.1, route-deny disable pmtu-v4 disabled ping enabled, telnet enabled, SSH enabled, SNMP enabled web enabled, ident-reset disabled, SSL enabled SSH is enabled SSH is ready for connections Maximum sessions: 3 Active sessions: 3

  A. Interface eth1 does not permit logins using SSH.

  B. SSH is not enabled on the NetScreen 5GT.

  C. Interface eth1's link status is down.

  D. The maximum SSH session has been used.

  Correct Answer: D

• Question 88:

  You have lost the admin user password for your NetScreen device. No other user accounts are configured on the device. How would you access the CLI?

  A. Log in on the console using the secret name "recovery" and password "netscreen".

  B. Send a break to the console during the boot process and modify the configuration registers.

  C. Log in on the console using the serial number as the username and password.

  D. Log in on the console using the secret name "recovery" and the serial number as the password.

  Correct Answer: C

• Question 89:

  You want to centralize the logging for all your ScreenOS devices and you must be able to synchronize the log. Which two actions would you perform to accomplish this? (Choose two.)

  A. Enable logging to the console.

  B. Enable logging to syslog.

  C. Enable NTP and set to UTC/GMT time.

  D. Enable logging to the USB.

  Correct Answer: BC

• Question 90:

  You manage a ScreenOS device. A user complains that the FTP download speed is slow. You suspect a cable or an interface might be the problem. Which command provides interface error information?

  A. show counter flow interface

  B. get counter flow interface

  C. show counter statistics interface

  D. get counter statistics interface

  Correct Answer: D