Juniper JN0-333 Online Practice Questions and Exam Preparation

Juniper JN0-333 Online Questions & Answers

• Question 61:

  What are three characteristics of session-based forwarding, compared to packet-based forwarding, on an SRX Series device? (Choose three.)

  A. Session-based forwarding uses stateful packet processing.
  B. Session-based forwarding requires less memory.
  C. Session-based forwarding performs faster processing of existing session.
  D. Session-based forwarding uses stateless packet processing,
  E. Session-based forwarding uses six tuples of information.
  A. Session-based forwarding uses stateful packet processing.
  C. Session-based forwarding performs faster processing of existing session.
  E. Session-based forwarding uses six tuples of information.

• Question 62:

  Which statement is true about high availability (HA) chassis clusters for the SRX Series device?

  A. Cluster nodes require an upgrade to HA compliant Routing Engines.
  B. Cluster nodes must be connected through a Layer 2 switch.
  C. There can be active/passive or active/active clusters.
  D. HA clusters must use NAT to prevent overlapping subnets between the nodes.
  C. There can be active/passive or active/active clusters.

• Question 63:

  Click the Exhibit button.

  You are configuring an OSPF session between two SRX Series devices. The session will not come up.

  Referring to the exhibit, which configuration change will solve this problem?

  

  A. Configure a loopback interface and add it to the trust zone.
  B. Configure the host-inbound-traffic protocols ospf parameter in the trust security zone.
  C. Configure the application junos-ospf parameter in the allow-trusted-traffic security policy.
  D. Configure the host-inbound-traffic system-services any-service parameter in the trust security zone.
  A. Configure a loopback interface and add it to the trust zone.

• Question 64:

  What are the maximum number of supported interfaces on a vSRX hosted in a VMware environment?

  A. 12
  B. 3
  C. 10
  D. 4
  A. 12

• Question 65:

  Which statement is true about functional zones?

  A. Functional zones are a collection of regulated transit network segments.
  B. Functional zones provide a means of distinguishing groups of hosts and their resources from one another.
  C. Functional zones are used for management.
  D. Functional zones are the building blocks for security policies.
  C. Functional zones are used for management.

• Question 66:

  Click the exhibit button.

  

  You are configuring security policies with Junos Space Security Director. Referring to the exhibit, which two statements are true? (Choose two.)

  A. The host device has three rules assigned to it.
  B. The policy assigned to the host device is published.
  C. The policy assigned to the host device requires publishing.
  D. The host device has two rules assigned to it.
  B. The policy assigned to the host device is published.
  D. The host device has two rules assigned to it.

• Question 67:

  You want to support reth LAG interfaces on a chassis cluster.

  Which setting must be enabled on the interconnecting switch to accomplish this task?

  A. RSTP
  B. 802.3ad
  C. swfab
  D. LLDP
  B. 802.3ad

• Question 68:

  You want to ensure that any certificates used in your IPsec implementation do not expire while in use by your SRX Series devices. In this scenario, what must be enabled on your devices?

  A. RSA
  B. TLS
  C. SCEP
  D. CRL
  C. SCEP

• Question 69:

  A link from the branch SRX Series device chassis cluster to the Internet requires more bandwidth. In this scenario, which command would you issue to begin provisioning a second link?

  A. set chassis cluster reth-count 2
  B. set interfaces fab0 fabric-options member-interfaces ge-0/0/1
  C. set interfaces ge-0/0/1 gigether-options redundant-parent reth1
  D. set chassis cluster redundancy-group 1 node 1 priority 1
  B. set interfaces fab0 fabric-options member-interfaces ge-0/0/1

• Question 70:

  Clients at a remote office are accessing a website that is against your company Internet policy. You change the action of the security policy that controls HTTP access from permit to deny on the remote office SRX Series device. After committing the policy change, you notice that new users cannot access the website but users that have existing sessions on the device still have access. You want to block all user sessions immediately.

  Which change would you make on the SRX Series device to accomplish this task?

  A. Add the set security flow tcp-session rst-invalidate-session option to the configuration and commit the change.
  B. Add the set security policies policy-rematch parameter to the configuration and commit the change.
  C. Add the security flow tcp-session strict-syn-check option to the configuration and commit the change.
  D. Issue the commit full command from the top of the configuration hierarchy.
  B. Add the set security policies policy-rematch parameter to the configuration and commit the change.