JN0-330試験無料問題集（150題）「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) 認定」

出題：1

Host A opens a Telnet connection to Host B.
Host A then opens another Telnet connection to Host B.
These connections are the only communication between Host A and Host B.
The security policy configuration permits both connections.
How many flows exist between Host A and Host B?

A. 2

B. 1

C. 4

D. 3

正解：C 解答を投票する

出題：2

What is the purpose of a zone in the JUNOS software with enhanced services?

A. A zone defines a group of network segments with similar class-of-service requirements.

B. A zone defines the geographic region in which the router is deployed.

C. A zone defines a group of routers with a common management.

D. A zone defines a group of network segments with similar security requirements.

正解：D 解答を投票する

出題：3

Click the Exhibit button.
All system services have been enabled.
Given the configuration shown in the exhibit, which interface allows both ping and SSH traffic?

A. ge-0/0/2.0

B. ge-0/0/1.0

C. ge-0/0/3.0

D. ge-0/0/0.0

正解：D 解答を投票する

出題：4

Interface ge-0/0/0.0 of your router is attached to the Internet and is configured with an IP address and network mask of 71.33.252.19/24. A host with IP address 10.20.20.1 is running an SSH service on TCP port 2222. This host is attached to the ge-0/0/3.0 interface of your router. You must use interface-based static NAT to make the SSH service on the host reachable from the Internet.
On which IP address and TCP port can Internet hosts reach the SSH service?

A. IP address 10.20.20.1 and TCP port 2222

B. IP address 71.33.251.1 and TCP port 22

C. IP address 71.33.252.19 and TCP port 22

D. IP address 71.33.252.20 and TCP port 2222

正解：D 解答を投票する

出題：5

Which two configuration elements are required for a route-based VPN? (Choose two.)

A. a route for the tunneled transit traffic

B. security policy to permit the IKE traffic

C. secure tunnel interface

D. tunnel policy for transit traffic referencing the IPSec VPN

正解：A,C 解答を投票する

出題：6

Which statement is correct?

A. Propagation attacks focus on suspicious packet formation using the DoS SYN-ACK- ACK proxy flood.

B. Both DoS and propagation attacks exploit and take control of all unprotected network devices.

C. DoS attacks are exploits in nature, while propagation attacks use trust relationships to take control of the devices.

D. DoS attacks are directed at the network protection devices, while propagation attacks are directed at the servers.

正解：C 解答を投票する

出題：7

Click the Exhibit button.
In the exhibit, which description of the configuration is correct?

A. Interfaces se-1/0/0.0 and se-1/0/1.0 are bound into a single multilink PPP bundle.

B. Interfaces se-1/0/0.0 and se-1/0/1.0 are bound into two logical multilink PPP bundles, each with its own unique IP address.

C. Interfaces se-1/0/0.0 and se-1/0/1.0 are bound into two multilink PPP bundles, each with its own LCP.

D. Interfaces se-1/0/0.0 and se-1/0/1.0 are bound into a single multilink PPP bundle using two LCP transition states, each for a separate IP address.

正解：A 解答を投票する

出題：8

Click the Exhibit button.
host_a is in subnet_a and host_b is in subnet_b.
Given the configuration shown in the exhibit, which statement is true about traffic from host_a to host_b?

A. SMTP traffic is denied.

B. Ping traffic is permitted.

C. Telnet traffic is denied.

D. DNS traffic is denied.

正解：C 解答を投票する

出題：9

Click the Exhibit button.
In the exhibit, R1 learns prefix 137.10/16 from BGP. In addition, you configured a static route in R1 and injected it into OSPF. R1 and R2 are OSPF and BGP peers.
By default, which protocol would R2 prefer when forwarding a packet to the destination
137.10/16?

A. load balance between OSPF and BGP

B. static route

C. BGP

D. OSPF

正解：D 解答を投票する

出題：10

A route-based VPN is required for which scenario?

A. when a dynamic routing protocol such as OSPF is required across the VPN

B. when the remote VPN peer is a dialup or remote access client

C. when multiple networks need to be reached across the tunnel

D. when the remote VPN peer is behind a NAT device

正解：A 解答を投票する

JN0-330試験無料問題集「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) 認定」