Juniper JN0-333 Online Practice Questions and Exam Preparation

Juniper JN0-333 Online Questions & Answers

• Question 1:

  Click the Exhibit button.

  

  You are monitoring traffic, on your SRX300 that was configured using the factory default security parameters. You notice that the SRX300 is not blocking traffic between Host A and Host B as expected. Referring to the exhibit, what is causing this issue?

  A. Host B was not assigned to the Untrust zone.
  B. You have not created address book entries for Host A and Host B.
  C. The default policy has not been committed.
  D. The default policy permits intrazone traffic within the Trust zone.
  D. The default policy permits intrazone traffic within the Trust zone.

• Question 2:

  Which type of VPN provides a secure method of transporting encrypted IP traffic?

  A. IPsec
  B. Layer 3 VPN
  C. VPLS
  D. Layer 2 VPN
  A. IPsec

• Question 3:

  Which process describes the implementation of screen options on an SRX Series device?

  A. Configured screen options are only applied when traffic does not match a valid route.
  B. Configured screen options are applied only to the first packet that is processed in a stateful session.
  C. Configured screen options are applied to all packets that are processed by the stateful session firewall processor.
  D. Configured screen options are only applied when traffic does not match a valid policy.
  C. Configured screen options are applied to all packets that are processed by the stateful session firewall processor.

• Question 4:

  Your network includes IPsec tunnels. One IPsec tunnel transits an SRX Series device with NAT configured. You must ensure that the IPsec tunnels function properly. Which statement is correct in this scenario?

  A. Persistent NAT should be enabled.
  B. NAT-T should be enabled.
  C. Destination NAT should be configured.
  D. A source address pool should be configured.
  B. NAT-T should be enabled.

• Question 5:

  You must verify if destination NAT is actively being used by users connecting to an internal server from the Internet. Which action will accomplish this task on an SRX Series device?

  A. Examine the destination NAT translations table.
  B. Examine the installed routes in the packet forwarding engine.
  C. Examine the NAT translation table.
  D. Examine the active security flow sessions.
  A. Examine the destination NAT translations table.

• Question 6:

  Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

  A. scheduler
  B. pass-through authentication
  C. ALGs
  D. counters
  A. scheduler

• Question 7:

  Click the Exhibit button.

  

  A customer would like to monitor their VPN using dead peer detection.

  Referring to the exhibit, for how many minutes was the peer down before the customer was notified?

  A. 5
  B. 3
  C. 4
  D. 2
  A. 5

• Question 8:

  Which statement describes the function of NAT?

  A. NAT encrypts transit traffic in a tunnel.
  B. NAT detects various attacks on traffic entering a security device.
  C. NAT translates a public address to a private address.
  D. NAT restricts or permits users individually or in a group.
  C. NAT translates a public address to a private address.

• Question 9:

  You want to protect your SRX Series device from the ping-of-death attack coming from the untrust security zone. How would you accomplish this task?

  A. Configure the host-inbound-traffic system-services ping except parameter in the untrust security zone.
  B. Configure the application tracking parameter in the untrust security zone.
  C. Configure a from-zone untrust to-zone trust security policy that blocks ICMP traffic.
  D. Configure the appropriate screen and apply it to the [edit security zone security-zone untrust] hierarchy.
  D. Configure the appropriate screen and apply it to the [edit security zone security-zone untrust] hierarchy.

• Question 10:

  Which three statements describes traditional firewalls? (Choose three.)

  A. A traditional firewall performs stateless packet processing.
  B. A traditional firewall offers encapsulation, authentication, and encryption.
  C. A traditional firewall performs stateful packet processing.
  D. A traditional firewall forwards all traffic by default.
  E. A traditional firewall performs NAT and PAT.
  B. A traditional firewall offers encapsulation, authentication, and encryption.
  C. A traditional firewall performs stateful packet processing.
  E. A traditional firewall performs NAT and PAT.