JN0-330試験無料問題集（150題）「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) 認定」

出題：1

Two VPN peers are negotiating IKE phase 1 using main mode. Which message pair in the negotiation contains the phase 1 proposal for the peers?

A. message 3 and 4

B. message 7 and 8

C. message 5 and 6

D. message 1 and 2

正解：D 解答を投票する

出題：2

Which two statements are valid at the [edit interfaces ge-0/0/0 unit 0] hierarchy? (Choose two.)

A. family inet;

B. family iso;

C. family ethernet;

D. family ipv6;

正解：A,B 解答を投票する

出題：3

On which three traffic types does firewall pass-through authentication work? (Choose three.)

A. Telnet

B. ping

C. HTTPS

D. FTP

E. HTTP

正解：A,D,E 解答を投票する

出題：4

Regarding secure tunnel (st) interfaces, which statement is true?

A. st interfaces are optional when configuring a route-based VPN.

B. You cannot apply static NAT on an st interface logical unit.

C. A static route can reference the st interface logical unit as the next-hop.

D. You cannot assign st interfaces to a security zone.

正解：C 解答を投票する

出題：5

You must configure a SCREEN option that would protect your router from a session table flood.
Which configuration meets this requirement?

A. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
limit-session {
source-ip-based 1200;
destination-ip-based 1200;
}

B. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
udp {
flood threshold 5000;
}

C. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
icmp {
ip-sweep threshold 5000;
flood threshold 2000;
}

D. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
tcp {
syn-flood {
attack-threshold 2000;
destination-threshold 2000;
}

正解：A 解答を投票する

出題：6

What is the correct management and control interface mapping when migrating from standalone to JSRP clustering mode?

A. fxp1 = ge-0/0/3 (JSRP control traffic)
fxp0 = ge-0/0/2 (JSRP management interface)

B. fab1 = ge-0/0/3 (JSRP control traffic)
fab0 = ge-0/0/2 (JSRP management traffic)

C. ge-7/0/3 = ge-0/0/3 (JSRP control traffic)
ge-7/0/2 = ge-0/0/2 (JSRP management traffic)

D. sp1 = ge-0/0/3 (JSRP management traffic)
sp0 = ge-0/0/2 (JSRP control traffic)

正解：A 解答を投票する

出題：7

Click the Exhibit button.
In the exhibit, you decided to change myHosts addresses.
What will happen to the new sessions matching the policy and in-progress sessions that had already matched the policy?

A. New sessions will halt until all in-progress sessions are re-evaluated. In-progress sessions will be re-evaluated and possibly dropped.

B. New sessions will be evaluated. All in-progress sessions will continue.

C. New sessions will continue. In-progress sessions will be re-evaluated.

D. New sessions will be evaluated. All in-progress sessions will be dropped.

正解：C 解答を投票する

出題：8

You want to create a policy allowing traffic from any host in the Trust zone to hostb.example.com (172.19.1.1) in the Untrust zone. How do you do create this policy?

A. Create an address book entry in the Trust zone for the 172.19.1.1/32 prefix and reference this entry in the policy.

B. Specify the DNS entry (hostb.example.com.) as the destination address in the policy.

C. Specify the IP address (172.19.1.1/32) as the destination address in the policy.

D. Create an address book entry in the Untrust zone for the 172.19.1.1/32 prefix and reference this entry in the policy.

正解：D 解答を投票する

出題：9

Which attribute is optional for IKE phase 2 negotiations?

A. security protocol (ESP or AH)

B. proxy-ID

C. phase 2 proposal

D. Diffie-Hellman group key

正解：D 解答を投票する

出題：10

Which two statements about the JUNOS software with enhanced services packet handling are correct? (Choose two.)

A. JUNOS software with enhanced services uses fast-path processing for the first packet of a flow only.

B. JUNOS software with enhanced services applies SCREEN options for both first and consecutive packets of a flow.

C. JUNOS software with enhanced services applies service ALGs only for the first packet of a flow.

D. JUNOS software with enhanced services performs route and policy lookup only for the first packet of a flow.

正解：B,D 解答を投票する

JN0-330試験無料問題集「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) 認定」