JN0-330試験無料問題集（150題）「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) 認定」

出題：1

Which two mechanisms do link-state protocols use? (Choose two.)

A. SPF algorithm

B. poison reverse

C. reliable link state advertisement transmission

D. split horizon

正解：A,C 解答を投票する

出題：2

You want to create an out-of-band management zone and assign the ge-0/0/0.0 interface to that zone. From the [edit] hierarchy, which command do you use to configure this assignment?

A. set zones functional-zone management interfaces ge-0/0/0.0

B. set security zones functional-zone management interfaces ge-0/0/0.0

C. set security zones management interfaces ge-0/0/0.0

D. set security zones functional-zone out-of-band interfaces ge-0/0/0.0

正解：B 解答を投票する

出題：3

Which statement is true about interface-based static NAT?

A. It also supports PAT.

B. It requires you to configure address entries in the junos-nat zone.

C. It requires you to configure address entries in the junos-global zone.

D. The IP addresses being translated must be in the same subnet as the incoming interface.

正解：D 解答を投票する

出題：4

Which two are components of the enhanced services software architecture? (Choose two.)

A. session-based forwarding module

B. Linux kernel

C. separate routing and security planes

D. routing protocol daemon

正解：A,D 解答を投票する

出題：5

In JUNOS software with enhanced services, which three packet elements are inspected to determine if a session already exists? (Choose three.)

A. source and destination IP address

B. IP time-to-live

C. IP protocol

D. source and destination TCP/UDP port

E. source and destination MAC address

正解：A,C,D 解答を投票する

出題：6

You want to create an out-of-band management zone and assign the ge-0/0/0.0 interface to that zone.
From the [edit] hierarchy, which command do you use to configure this assignment?

A. set zones functional-zone management interfaces ge-0/0/0.0

B. set security zones functional-zone management interfaces ge-0/0/0.0

C. set security zones management interfaces ge-0/0/0.0

D. set security zones functional-zone out-of-band interfaces ge-0/0/0.0

正解：B 解答を投票する

出題：7

You are not able to telnet to the interface IP of your JUNOS software with enhanced services device from a PC on the same subnet. What is causing the problem?

A. Telnet is not being permitted by self policy.

B. Telnet is not enabled as a host-inbound service on the zone.

C. Telnet is not being permitted by security policy.

D. Telnet is not allowed because it is not considered secure.

正解：B 解答を投票する

出題：8

Which statement is true about source NAT?

A. Destination NAT is required to translate the reply traffic.

B. The egress interface IP address can be used for source NAT.

C. Source NAT does not require a security policy to function.

D. Source NAT works only with source pools.

正解：B 解答を投票する

出題：9

Which two statements about the Diffie-Hellman (DH) key exchange process are correct?
(Choose two.)

A. In the DH key exchange process, the public and private keys are not mathematically related, ensuring higher security.

B. In the DH key exchange process, the session key is never passed across the network.

C. In the DH key exchange process, the public and private keys are mathematically related using the DH algorithm.

D. In the DH key exchange process, the session key is passed across the network to the peer for confirmation.

正解：B,C 解答を投票する

出題：10

Which two statements about OSPF are correct? (Choose two.)

A. OSPF stub areas do not have any Type 5 LSAs, while totally stubby areas do not have any Type 5, 3, and 4 LSAs.

B. The OSPF backbone area contains Type 5 LSAs, while not-so-stubby areas contain Type 7 LSAs.

C. OSPF not-so-stubby areas do not have any Type 5 LSAs, while the backbone area contains Type 7 LSAs.

D. The OSPF backbone area contains all routes, while other OSPF areas contain only summary routes.

正解：A,B 解答を投票する

JN0-330試験無料問題集「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) 認定」