Juniper JN0-333 Online Practice Questions and Exam Preparation

Juniper JN0-333 Online Questions & Answers

• Question 31:

  You want to trigger failover of redundancy group 1 currently running on node 0 and make node 1 the primary node the redundancy group 1. Which command would be used accomplish this task?

  A. user@host# set chassis cluster redundancy-group 1 node 1
  B. user@host> request chassis cluster failover redundancy-group 1 node 1
  C. user@host# set chassis cluster redundancy-group 1 preempt
  D. user@host> request chassis cluster failover reset redundancy-group 1
  B. user@host> request chassis cluster failover redundancy-group 1 node 1

• Question 32:

  Which statement is true when destination NAT is performed?

  A. The source IP address is translated according to the configured destination NAT rules and then the security policies are applied.
  B. The destination IP address is translated according to the configured source NAT rules and then the security policies are applied.
  C. The destination IP address is translated according to the configured security policies and then the security destination NAT rules are applied.
  D. The destination IP address is translated according to the configured destination NAT rules and then the security policies are applied.
  D. The destination IP address is translated according to the configured destination NAT rules and then the security policies are applied.

• Question 33:

  Which two modes are supported during the Phase 1 IKE negotiations used to establish an IPsec tunnel? (Choose two.)

  A. transport mode
  B. aggressive mode
  C. main mode
  D. tunnel mode
  B. aggressive mode
  C. main mode

• Question 34:

  Which action will restrict SSH access to an SRX Series device from a specific IP address which is connected to a security zone named trust?

  A. Implement a firewall filter on the security zone trust.
  B. Implement a security policy from security zone junos-host to security zone trust.
  C. Implement host-inbound-traffic system-services to allow SSH.
  D. Implement a security policy from security zone trust to security zone junos-host.
  D. Implement a security policy from security zone trust to security zone junos-host.

• Question 35:

  Click the Exhibit button.

  

  Referring to the exhibit, which statement is true?

  A. TCP packets entering the interface are failing the TCP sequence check.
  B. Packets entering the interface are being dropped due to a stateless filter.
  C. Packets entering the interface are getting dropped because there is no route to the destination.
  D. Packets entering the interface matching an ALG are getting dropped.
  C. Packets entering the interface are getting dropped because there is no route to the destination.

• Question 36:

  In a chassis cluster, which two characteristics are true regarding reth interfaces? (Choose two.)

  A. A reth interface inherits its failover properties from a redundancy group.
  B. Reth interfaces must be the same type of interface.
  C. Reth interfaces must be in the same slots on each node.
  D. A reth interface goes down if one of its child interfaces become unavailable.
  A. A reth interface inherits its failover properties from a redundancy group.
  B. Reth interfaces must be the same type of interface.

• Question 37:

  A session token on an SRX Series device is derived from what information? (Choose two.)

  A. routing instance
  B. zone
  C. screen
  D. MAC address
  A. routing instance
  B. zone

• Question 38:

  Click the Exhibit button.

  

  Referring to the exhibit, what will happen if client 172.16.128.50 tries to connect to destination 192.168.150.111 using HTTP?

  A. The client will be denied by policy p2.
  B. The client will be denied by policy p1.
  C. The client will be permitted by policy p2.
  D. The client will be permitted by policy p1.
  D. The client will be permitted by policy p1.

• Question 39:

  Which three elements does AH provide in an IPsec implementation? (Choose three.)

  A. confidentiality
  B. authentication
  C. integrity
  D. availability
  E. replay attack protection
  B. authentication
  C. integrity
  E. replay attack protection

• Question 40:

  Click to the Exhibit button.

  Referring to the exhibit, which two statements are true? (Choose two.)

  

  A. Interface ge-0/0/0 will not accept SSH connections.
  B. Interfaces ge-0/0/0.0 and ge-0/0/1.0 will allow SSH connections.
  C. Interface ge-0/0/0.0 will respond to pings.
  D. Interface ge-0/0/1.0 will respond to pings.
  B. Interfaces ge-0/0/0.0 and ge-0/0/1.0 will allow SSH connections.
  D. Interface ge-0/0/1.0 will respond to pings.