Juniper Juniper Certifications JN0-740 Questions & Answers

• Question 211:

  When configuring a NetScreen device in transparent mode, what is required to forward traffic?

  A. There must be at least one policy configured

  B. The VLAN1 interface must have a manage-ip value set

  C. The VLAN1 interface must have an ip address configured

  D. The netscreen device must have the transparent option set under admin options

  Correct Answer: A

• Question 212:

  What must be configured to remotely manage a NetScreen device operating in transparent mode?

  A. An IP address must be configured for VLAN1

  B. The telnet management service must be enabled

  C. An IP address must be configured for the VLAN zone

  D. V1-Trust needs to have management services enabled

  E. The public SNMP community string must be configured

  Correct Answer: A

• Question 213:

  In transparent mode, you can create policies between which zones?

  A. V1-Trust and untrust

  B. Private and L2-Public

  C. V1-Global and V1-Global

  D. V1-Trust and Private (L2)

  E. V1-Untrust and L2-Private

  Correct Answer: E

• Question 214:

  What are two benefits of configuring a ScreenOS device in transparent mode? (Choose two.)

  A. There is no need to reconfigure the IP addresses of routers or protected servers.

  B. There is no need to create MIPs or VIPs for incoming traffic to reach protected servers.

  C. Policies are easier to create since you do not have to include source and destination IP addresses.

  D. The product can support more VPNs and obtain greater throughput because there is less overhead to manage.

  Correct Answer: AB

• Question 215:

  What is the purpose of the VLAN1 interface?

  A. It provides policy-based NAT for 802.1Q VLANs.

  B. It provides an interface that can be used with 802.1Q VLANs in transparent mode.

  C. It provides the ScreenOS device with a routable IP address while operating in route mode.

  D. It provides an interface that can be used to remotely manage the ScreenOS device while operating in transparent mode.

  Correct Answer: D

• Question 216:

  Which two statements are true in regards to a ScreenOS firewall in transparent mode? (Choose two.)

  A. VPNs can terminate to the VLAN1 interface IP address.

  B. Static routes must be configured if multiple virtual routers are going to be used.

  C. It can be installed in a network without the requirement to reconfigure IP addressing schemes.

  D. You must use the console port to manage the device as you cannot manage the device using an Ethernet port.

  Correct Answer: AC

• Question 217:

  A ScreenOS firewall is running in transparent mode. The firewall receives a packet which has no entry in its forwarding table.

  What will the firewall do?

  A. Flood out all ports.

  B. Check its route table for interzone destination.

  C. Perform a policy lookup to determine the interfaces to which the source address is permitted, and flood the packet out of those interfaces.

  D. Perform a policy lookup to determine the zones to which the source address is permitted, and flood the packet out the interfaces bound to those zones.

  Correct Answer: D

• Question 218:

  When a device is in transparent mode, which fields will be modified as the traffic transverses the firewall?

  A. None of the above

  B. The source port only

  C. The source and destination IP

  D. The source IP but not the destination IP

  E. The destination IP but not the source IP

  Correct Answer: A

• Question 219:

  What are two (2) benefits of configuring the Netscreen in Transparent mode?

  A. There is no need for IP addresses even for remote management

  B. There is no need to reconfigure the IP addresses of routers or protected Servers

  C. There is no need to create Mapped or Virtual IPs for incoming traffic to reach protected servers

  D. Policies are easier to create since you do not have to include Source and Destination IP addresses

  E. The product can support more VPNs and obtain greater throughput because there is less overhead to manage

  Correct Answer: BC

• Question 220:

  Which three (3) statements are true in regards to a netscreen device in transparent mode?

  A. All interfaces belong to VLAN1 zone for management

  B. VPNs can terminate to the VLAN1 interface IP address

  C. Static routes must be configured if multiple virtual routers are going to be used

  D. It can be installed in a network without the requirement to reconfigure ip addressing schemes

  E. You must use the console port to manage the device as you cannot manage the device via an ethernet port.

  Correct Answer: ABD