Juniper JN0-333 Online Practice Questions and Exam Preparation

Juniper JN0-333 Online Questions & Answers

• Question 41:

  Which two statements are true when implementing source NAT on an SRX Series device? (Choose two.)

  A. Source NAT is applied before the security policy search.
  B. Source NAT is applied after the route table lookup.
  C. Source NAT is applied before the route table lookup.
  D. Source NAT is applied after the security policy search.
  B. Source NAT is applied after the route table lookup.
  D. Source NAT is applied after the security policy search.

• Question 42:

  Click the Exhibit button.

  

  Users at a remote office are unable to access an FTP server located at the remote corporate data center as expected. The remote FTP server is listening on the non-standard TCP port 2121. Referring to the exhibit, what is causing the problem?

  A. The FTP clients must be configured to listen on non-standard client ports for the FTP data channel negotiations to succeed.
  B. Two custom FTP applications must be defined to allow bidirectional FTP communication through the SRX Series device.
  C. The custom FTP application definition does not have the FTP ALG enabled.
  D. A new security policy must be defined between the untrust and trust zones.
  D. A new security policy must be defined between the untrust and trust zones.

• Question 43:

  What are three defined zone types on an SRX Series device?

  A. dynamic
  B. junos-host
  C. null
  D. functional
  E. routing
  B. junos-host
  C. null
  D. functional

• Question 44:

  Which statement describes the function of screen options?

  A. Screen options encrypt transit traffic in a tunnel.
  B. Screen options protect against various attacks on traffic entering a security device.
  C. Screen options translate a private address to a public address.
  D. Screen options restrict or permit users individually or in a group.
  B. Screen options protect against various attacks on traffic entering a security device.

• Question 45:

  Screens help prevent which three attack types? (Choose three.)

  A. SYN flood
  B. port scan
  C. NTP amplification
  D. ICMP fragmentation
  E. SQL injection
  A. SYN flood
  B. port scan
  D. ICMP fragmentation

• Question 46:

  Click the Exhibit button.

  

  You have configured NAT on your network so that Host A can communicate with Server B. You want to ensure that Host C can initiate communication with Host A using Host A's reflexive address.

  Referring to the exhibit, which parameter should you configure on the SRX Series device to satisfy this requirement?

  A. Configure persistent NAT with the target-host parameter.
  B. Configure persistent NAT with the target-host-port parameter.
  C. Configure persistent NAT with the any-remote-host parameter.
  D. Configure persistent NAT with the port-overloading parameter.
  A. Configure persistent NAT with the target-host parameter.

• Question 47:

  What are two valid zones available on an SRX Series device? (Choose two.)

  A. security zones
  B. policy zones
  C. transit zones
  D. functional zones
  A. security zones
  D. functional zones

• Question 48:

  Which UDP port is used in Ipsec tunneling when NAT-T is in use?

  A. 50
  B. 4500
  C. 500
  D. 51
  B. 4500

• Question 49:

  What are the maximum number of redundancy groups that would be used on a chassis cluster?

  A. The maximum number of redundancy groups use is equal to the number of configured physical interfaces.
  B. The maximum number of redundancy groups use is equal to one more than the number of configured physical interfaces.
  C. The maximum number of redundancy groups use is equal to the number of configured logical interfaces.
  D. The maximum number of redundancy groups use is equal to one more than the number of configured logical interfaces.
  C. The maximum number of redundancy groups use is equal to the number of configured logical interfaces.

• Question 50:

  What are two supported hypervisors for hosting a vSRX? (Choose two.)

  A. VMware ESXi
  B. Solaris Zones
  C. KVM
  D. Docker
  A. VMware ESXi
  C. KVM