VCEdump

JN0-333 Security, Specialist (JNCIS-SEC)

PDF question preview Back to product

Reading controls

Reader tools

Free demo

12 of 75 questions

Purchase the full version to unlock every question and answer.

View the full question set

Preview tools

Try Web TestEngine

Question formats

Single choice7

Multiple choice5

Juniper · JN0-333

Free JN0-333 Exam Dumps Preview

Preview real exam questions, verified answers and available explanations before choosing a study plan.

Question 1

Multiple choice

You recently configured an IPsec VPN between two SRX Series devices. You notice that the Phase1 negotiation succeeds and the Phase 2 negotiation fails.

Which two configuration parameters should you verify are correct? (Choose two.)

A
Verify that the IKE gateway proposals on the initiator and responder are the same.
B
Verify that the VPN tunnel configuration references the correct IKE gateway.
C
Verify that the IKE initiator is configured for main mode.
D
Verify that the IPsec policy references the correct IKE proposals.

Reveal answer details Close answer details

Correct answersA, B

Question 2

Single choice

Click the exhibit button.

Referring to the exhibit, which statement is true?

A
Packets entering the interface are being dropped because of a stateless filter.
B
Packets entering the interface matching an ALG are getting dropped.
C
TCP packets entering the interface are failing the TCP sequence check.
D
Packets entering the interface are getting dropped because the interface is not bound to a zone.

Reveal answer details Close answer details

Correct answerD

Question 3

Single choice

Which statement describes the function of screen options?

A
Screen options encrypt transit traffic in a tunnel.
B
Screen options protect against various attacks on traffic entering a security device.
C
Screen options translate a private address to a public address.
D
Screen options restrict or permit users individually or in a group.

Reveal answer details Close answer details

Correct answerB

Question 4

Single choice

You have configured source NAT with port address translation. You also need to guarantee that the same IP address is assigned from the source NAT pool to a specific host for multiple concurrent sessions.

Which NAT parameter would meet this requirement?

A
port block-allocation
B
port range twin-port
C
address-persistent
D
address-pooling paired

Reveal answer details Close answer details

Correct answerD

Question 5

Single choice

Which statement describes the function of NAT?

A
NAT encrypts transit traffic in a tunnel.
B
NAT detects various attacks on traffic entering a security device.
C
NAT translates a public address to a private address.
D
NAT restricts or permits users individually or in a group.

Reveal answer details Close answer details

Correct answerC

Question 6

Single choice

Click the Exhibit button.

You are configuring an OSPF session between two SRX Series devices. The session will not come up.

Referring to the exhibit, which configuration change will solve this problem?

A
Configure a loopback interface and add it to the trust zone.
B
Configure the host-inbound-traffic protocols ospf parameter in the trust security zone.
C
Configure the application junos-ospf parameter in the allow-trusted-traffic security policy.
D
Configure the host-inbound-traffic system-services any-service parameter in the trust security zone.

Reveal answer details Close answer details

Correct answerA

Question 7

Single choice

Which type of VPN provides a secure method of transporting encrypted IP traffic?

A
IPsec
B
Layer 3 VPN
C
VPLS
D
Layer 2 VPN

Reveal answer details Close answer details

Correct answerA

Question 8

Multiple choice

A session token on an SRX Series device is derived from what information? (Choose two.)

A
routing instance
B
zone
C
screen
D
MAC address

Reveal answer details Close answer details

Correct answersA, B

Question 9

Multiple choice

Click the Exhibit button.

You have an IPsec tunnel between two devices. You clear the IKE security associations, but traffic continues to flow across the tunnel.

Referring to the exhibit, which statement is correct in this scenario?

A
The IPsec security association is independent from the IKE security association
B
The traffic is no longer encrypted
C
The IKE security association immediately reestablishes
D
The traffic is using an alternate path

Reveal answer details Close answer details

Correct answersA, B

Question 10

Multiple choice

Which two statements are true when implementing source NAT on an SRX Series device? (Choose two.)

A
Source NAT is applied before the security policy search.
B
Source NAT is applied after the route table lookup.
C
Source NAT is applied before the route table lookup.
D
Source NAT is applied after the security policy search.

Reveal answer details Close answer details

Correct answersB, D

Question 11

Single choice

Click the Exhibit button.

Referring to the exhibit, which statement is true?

A
TCP packets entering the interface are failing the TCP sequence check.
B
Packets entering the interface are being dropped due to a stateless filter.
C
Packets entering the interface are getting dropped because there is no route to the destination.
D
Packets entering the interface matching an ALG are getting dropped.

Reveal answer details Close answer details

Correct answerC

Question 12

Multiple choice

Which three statements describes traditional firewalls? (Choose three.)

A
A traditional firewall performs stateless packet processing.
B
A traditional firewall offers encapsulation, authentication, and encryption.
C
A traditional firewall performs stateful packet processing.
D
A traditional firewall forwards all traffic by default.
E
A traditional firewall performs NAT and PAT.

Reveal answer details Close answer details

Correct answersB, C, E

VOL	TYPE	QUESTIONS
1	Single choice	7
2	Multiple choice	5

Free JN0-333 Exam Dumps Preview

Security, Specialist (JNCIS-SEC)

PREVIEW CONTENTS · 2 VOLUMES

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9

QUESTION 10

QUESTION 11

QUESTION 12