Juniper JNCIS JN0-740 Questions & Answers

• Question 1:

  -- Exhibit -

  

  -- Exhibit -

  A. 10.0.0.1

  B. 20.0.0.1

  C. 1.1.1.250

  D. 4.4.4.250

  Correct Answer: D

• Question 2:

  -- Exhibit -

  

  -- Exhibit -Click the Exhibit button. In the exhibit, you need to make a bidirectional VPN between the SSG 5 and the SSG 550. On the

  SSG550, which address will you use to configure the IKE gateway?

  A. 10.0.0.1

  B. 20.0.0.1

  C. 1.1.1.250

  D. 4.4.4.250

  Correct Answer: C

• Question 3:

  -- Exhibit --- Exhibit -Click the Exhibit button. In the exhibit, which two network addresses could appear in the remote proxy-ID for the SSG 550 during

  

  the IKE phase two exchange? (Choose two.)

  A. 1.1.1.250

  B. 10.0.0.0/8

  C. 20.0.0.0/8

  D. 10.0.0.5/32

  Correct Answer: BD

• Question 4:

  -- Exhibit -

  

  -- Exhibit -Click the Exhibit button to view the exhibit.

  Review the exhibit. In this route-based VPN configuration, where are policies going to be required?

  A. 208 - Trust to Untrust

  B. 208 - Untrust to Trust

  C. 5XT - Trust to Untrust

  D. 5XT - Untrust to Trust

  Correct Answer: AB

• Question 5:

  -- Exhibit -

  

  -- Exhibit -Click the Exhibit button to view the exhibit. Review the exhibit. You need to make a bidirectional gateway between the 5XT and the 208. What

  gateway address will you configure on the 208 for the VPN?

  A. 10.0.0.1

  B. 20.0.0.1

  C. 1.1.1.250

  D. 4.4.4.250

  Correct Answer: C

• Question 6:

  -- Exhibit -

  

  -- Exhibit -Click the Exhibit button. In the exhibit, which two forms of address translation would have generated the output shown? (Choose

  two.)

  A. MIP

  B. Interface-based translation

  C. NAT-src with a DIP, fixed-port enabled

  D. NAT-src with a DIP, fixed-port disabled

  Correct Answer: AC

• Question 7:

  -- Exhibit -

  

  -- Exhibit -Click the Exhibit button.

  In the exhibit, which two forms of address translation could have generated the output shown?

  A. MIP

  B. Interface-based translation

  C. NAT-src with a DIP, fixed-port enabled

  D. NAT-src with a DIP, fixed-port disabled

  Correct Answer: AC

• Question 8:

  -- Exhibit -

  

  -- Exhibit -Click the Exhibit button. In the exhibit, which two forms of address translation would have generated the output shown? (Choose

  two.)

  A. MIP

  B. NAT-src with no DIP

  C. Interface-based translation

  D. NAT-src with a DIP, fixed-port disabled

  Correct Answer: BC

• Question 9:

  -- Exhibit -

  

  -- Exhibit -Click the Exhibit button.

  Traffic from the Internet to the partner servers must use a VIP.

  In the exhibit, what is true about the configuration of this feature?

  A. You cannot use a VIP in this environment.

  B. The VIP can be configured on the e0/4 interface.

  C. The VIP can be configured in the Corporate or Internet zone using a different subnet than the physical interface.

  D. The VIP will work only if the destination ports in the incoming packet headers are mapped to the same ports in the Corporate zone.

  Correct Answer: A

• Question 10:

  -- Exhibit -

  

  -- Exhibit -Click the Exhibit button to view the exhibit.

  Review the exhibit. Which two forms of address translation could have generated the output shown?

  A. MIP

  B. Interface-based translation

  C. NAT-src with a DIP, fixed-port enabled

  D. NAT-src with a DIP, fixed-port disabled

  Correct Answer: BD