Juniper Juniper Certifications JN0-740 Questions & Answers

• Question 51:

  Which three (3) items are valid Connection Security options in the NetScreen Remote client?

  A. Block

  B. Permit

  C. Tunnel

  D. Secure

  E. Non-secure

  Correct Answer: ADE

• Question 52:

  Which number is used by get event to view all VPN events?

  A. 356

  B. 536

  C. 563

  D. 634

  Correct Answer: B

• Question 53:

  Which command is used to verify IKE Phase 1 is complete?

  A. get sa active

  B. get ike active

  C. get ike cookie

  D. get flow active

  Correct Answer: C

• Question 54:

  You have created a route-based VPN in your ScreenOS device. When the remote device tries to connect

  you see the following message in your event log:

  No policy exists for the proxy id received.

  Which two would cause this to occur? (Choose two.)

  A. a proxy-id conflict

  B. an unbound tunnel interface

  C. the remote device is a policy-based VPN

  D. the tunnel interface is configured in a different zone than the physical interface

  Correct Answer: AC

• Question 55:

  You have created a route-based VPN. When you try to connect to the remote device you see the following message in your event log: No policy exists for the proxy id received

  What two (2) things can cause this to occur?

  A. A proxy id conflict

  B. An unbound tunnel interface

  C. The remote device is a policy-based VPN

  D. The tunnel interface is configured in a different zone than the physical interface

  Correct Answer: AC

• Question 56:

  You are creating route-based VPNs on a NS208. When creating your 101st interface, you receive an error message and are prevented from creating additional tunnel interfaces.

  What would cause this problem?

  A. There is a limit of 100 tunnel interfaces per zone.

  B. There is a limit of 100 tunnel interfaces per NS208.

  C. There is a limit of 100 tunnel interfaces per virtual router.

  D. Acquire a license key to increase the number of tunnel interfaces that can be created.

  Correct Answer: B

• Question 57:

  What are three components of a tunnel interface configuration? (Choose three.)

  A. zone

  B. virtual router

  C. subnet mask

  D. IP addressing

  E. virtual system

  Correct Answer: ACD

• Question 58:

  You are creating route-based VPNs on a NS208. When creating your 101st interface, you receive an error

  message and are prevented from creating additional tunnel interfaces.

  What would cause this problem?

  A. There is a limit of 100 tunnel interfaces per zone

  B. There is a limit of 100 tunnel interfaces per NS208

  C. There is a limit of 100 tunnel interfaces per virtual router

  D. Acquire a license key to increase the number of tunnel interfaces that can be created.

  Correct Answer: B

• Question 59:

  You want to minimize the number of IP addresses, subnets, and policies in use. How should you configure your tunnel interface?

  A. Configure the tunnel interface with an IP address with a 32-bit subnet mask.

  B. Configure the tunnel interface with an IP address with a 30-bit subnet mask.

  C. Configure the tunnel interface as unnumbered and place the interface in the same zone as the designated interface.

  D. Configure the tunnel interface as unnumbered, but place the tunnel interface in a different zone than the designated interface.

  Correct Answer: C

• Question 60:

  You want to minimize the number of IP addresses and subnets in use. How should you configure your tunnel interface?

  A. Configure the tunnel interface with an IP address with a 32 bit subnet mask

  B. Configure the tunnel interface with an IP address with a 30 bit subnet mask

  C. Configure the tunnel interface as unnumbered and place the interface in the same zone as the designated interface

  D. Configure the tunnel interface as unnumbered, but place the tunnel interface in a different zone than the designated interface

  Correct Answer: C