JN0-330試験無料問題集（150題）「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) 認定」

出題：1

Two VPN peers are negotiating IKE phase 1 using main mode. Which message pair in the negotiation contains the phase 1 proposal for the peers?

A. message 3 and 4

B. message 7 and 8

C. message 5 and 6

D. message 1 and 2

正解：D 解答を投票する

出題：2

Which two are components of the JUNOS software's routing policy? (Choose two.)

A. route-map

B. policy-statement

C. distribute-list

D. prefix-list

正解：B,D 解答を投票する

出題：3

Interface ge-0/0/2.0 of your router is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A host with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. This host is attached to the ge-0/0/0.0 interface of your router. You must use interface-based static NAT to make the HTTP service on the host reachable from the Internet.
On which IP address and TCP port can Internet hosts reach the HTTP service?

A. IP address 10.10.10.1 and TCP port 8080

B. IP address 71.33.252.19 and TCP port 8080

C. IP address 71.33.251.19 and TCP port 80

D. IP address 71.33.252.17 and TCP port 80

正解：B 解答を投票する

出題：4

You want to enable SSH and Telnet access to the router's CLI. Under which configuration hierarchy would you enable these protocols?

A. [edit system cli]

B. [edit security cli]

C. [edit system services]

D. [edit security services]

正解：C 解答を投票する

出題：5

Which configuration will allow users to authenticate using a local account only when the RADIUS server is unreachable?

A. [edit security]
user@host# show auth-order
auth-order radius;

B. [edit security]
user@host# show auth-order
auth-order [ radius password ];

C. [edit system]
user@host# show authentication-order
authentication-order radius;

D. [edit system]
user@host# show authentication-order
authentication-order [ radius password ];

正解：C 解答を投票する

出題：6

A route-based VPN is required for which scenario?

A. when a dynamic routing protocol such as OSPF is required across the VPN

B. when the remote VPN peer is a dialup or remote access client

C. when multiple networks need to be reached across the tunnel

D. when the remote VPN peer is behind a NAT device

正解：A 解答を投票する

出題：7

Regarding a route-based versus policy-based IPSec VPN, which statement is true?

A. A route-based VPN is better suited for dialup or remote access VPNs compared to a policy-based VPN.

B. A route-based VPN cannot have a deny action in a policy; a policy-based VPN can have a deny action.

C. A route-based VPN generally uses less resources than a policy-based VPN.

D. A route-based VPN uses a policy referencing the IPSec VPN; a policy-based VPN policy does not use a policy referencing the IPSec VPN.

正解：C 解答を投票する

出題：8

Click the Exhibit button. In the exhibit, which two statements accurately describe the information about the interface se-1/0/1.605? (Choose two.)

A. The interface's IP address is 172.18.36.9.

B. The interface se-1/0/1.605 belongs to trust zone and is connected to the Frame Relay network.

C. The interface's IP address is 192.18.36.11.

D. The interface se-1/0/1.605 allows only host-inbound traffic identified in the command output; no other traffic can transit the interface.

正解：A,B 解答を投票する

出題：9

Which three steps are required for WebAuth? (Choose three)

A. external authentication server

B. WebAuth IP address

C. security policy

D. access profile

E. username and password

正解：B,C,D 解答を投票する

出題：10

You want to create an out-of-band management zone and assign the ge-0/0/0.0 interface to that zone.
From the [edit] hierarchy, which command do you use to configure this assignment?

A. set zones functional-zone management interfaces ge-0/0/0.0

B. set security zones functional-zone management interfaces ge-0/0/0.0

C. set security zones management interfaces ge-0/0/0.0

D. set security zones functional-zone out-of-band interfaces ge-0/0/0.0

正解：B 解答を投票する

JN0-330試験無料問題集「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) 認定」