JN0-330試験無料問題集（150題）「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) 認定」

出題：1

Click the Exhibit button.
In the exhibit, which two CLI commands allow you to monitor DHCP address conflicts?
(Choose two.)

A. show system services dhcp binding

B. show log dhcpd

C. show system services dhcp conflict

D. show log conflicts

正解：B,C 解答を投票する

出題：2

What are three main phases of an attack? (Choose three.)

正解：A,B,C 解答を投票する

出題：3

Regarding secure tunnel (st) interfaces, which statement is true?

A. st interfaces are optional when configuring a route-based VPN.

B. You cannot apply static NAT on an st interface logical unit.

C. A static route can reference the st interface logical unit as the next-hop.

D. You cannot assign st interfaces to a security zone.

正解：C 解答を投票する

出題：4

Assuming the default policy action is deny, which two of the following must you configure for IPv4 transit traffic to pass between the ge-0/0/0.0 and ge-0/0/2.0 interfaces? (Choose two.)

A. family inet on each logical interface

B. a routing instance for each logical interface

C. a host-inbound-traffic section for each logical interface

D. a security zone for each logical interface

正解：A,D 解答を投票する

出題：5

Which two statements regarding asymmetric key encryption are true? (Choose two.)

A. The same key is used for encryption and decryption.

B. It is commonly used to create digital certificate signatures.

C. It uses two keys: one for encryption and a different key for decryption.

D. An attacker can decrypt data if the attacker captures the key used for encryption.

正解：B,C 解答を投票する

出題：6

In a JSRP cluster with two J6350 routers, the interface ge-7/0/0 belongs to which device?

A. This interface belongs to NODE1 of the cluster.

B. This interface belongs to NODE0 of the cluster.

C. This interface will not exist because J6350 routers have only six slots.

D. This interface is a system-created interface.

正解：A 解答を投票する

出題：7

Click the Exhibit button.
A flow of HTTP traffic needs to go from HOSTA to HOSTB through a router. Assume that traffic will initiate from HOSTA and that HOSTA is in zone trust and HOSTB is in zone untrust.
What will happen to the traffic given the configuration in the exhibit?

A. The traffic will be permitted by policy AllowHTTP.

B. The traffic will be permitted by policy AllowHTTP2.

C. The traffic will be permitted by policy AllowHTTP3.

D. The traffic will be dropped as no policy match will be found.

正解：C 解答を投票する

出題：8

Click on the Exhibit button.
Which type of source NAT is configured in the exhibit?

A. static source pool

B. source pool with PAT

C. interface source pool

D. source pool without PAT

正解：B 解答を投票する

出題：9

Which two statements about the use of SCREEN options are correct?

A. Although SCREEN options are very useful, their use can result in more session creation.

B. SCREEN options check traffic prior to policy processing, thereby resulting in fewer resouces used for malicious packet processing.

C. SCREEN options offer protection against various attacks at the ingress zone of a packet flow.

D. SCREEN options are deployed at the ingress and egress sides of a packet flow.

正解：B,C 解答を投票する

出題：10

Click the Exhibit button.
All system services have been enabled.
Given the configuration shown in the exhibit, which interface allows both ping and SSH traffic?

A. ge-0/0/2.0

B. ge-0/0/1.0

C. ge-0/0/3.0

D. ge-0/0/0.0

正解：D 解答を投票する

JN0-330試験無料問題集「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) 認定」