JN0-330試験無料問題集（150題）「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) 認定」

出題：1

Click the Exhibit button.
Which type of source NAT is configured in the exhibit?

A. souce pool without PAT

B. static source pool

C. source pool with PAT

D. interface source pool

正解：B 解答を投票する

出題：2

Your task is to provision the router running JUNOS software with enhanced services to permit transit packets from the Private zone to the External zone by using an IPSec VPN and log information at the time of session close.
Which configuration meets this requirement?

A. [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
log {
session-init;
}

B. [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
count {
session-close;
}

C. [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
log;
count session-close;
}

D. [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
log {
session-close;
}

正解：D 解答を投票する

出題：3

Which two statements describe the purpose of security policy?

A. It controls host inbound services on a zone.

B. It enables traffic counting and logging.

C. It controls administrator rights to access the device.

D. It enforces a set of rules for transit traffic.

正解：B,D 解答を投票する

出題：4

Which two statements about the Diffie-Hellman (DH) key exchange process are correct?
(Choose two.)

A. In the DH key exchange process, the public and private keys are not mathematically related, ensuring higher security.

B. In the DH key exchange process, the session key is never passed across the network.

C. In the DH key exchange process, the public and private keys are mathematically related using the DH algorithm.

D. In the DH key exchange process, the session key is passed across the network to the peer for confirmation.

正解：B,C 解答を投票する

出題：5

You want to enable SSH and Telnet access to the router's CLI. Under which configuration hierarchy would you enable these protocols?

A. [edit system cli]

B. [edit security cli]

C. [edit system services]

D. [edit security services]

正解：C 解答を投票する

出題：6

Click the Exhibit button.
In the exhibit, what is the priority for Router B in VRRP group 100?

A. 110

B. 1

C. 100

D. 255

正解：C 解答を投票する

出題：7

Assuming the default policy action is deny, which two of the following must you configure for IPv4 transit traffic to pass between the ge-0/0/0.0 and ge-0/0/2.0 interfaces? (Choose two.)

A. family inet on each logical interface

B. a routing instance for each logical interface

C. a host-inbound-traffic section for each logical interface

D. a security zone for each logical interface

正解：A,D 解答を投票する

出題：8

What is the functionality of redundant interfaces (RETH) in a JSRP cluster?

A. Each cluster member has a RETH interface that can be used to share session state information with the other cluster members.

B. RETH interfaces are the same as physical interfaces.

C. RETH interfaces are logical interfaces that are considered the parent interface for two physical interfaces.

D. RETH interfaces are used only for VRRP.

正解：C 解答を投票する

出題：9

You must configure a SCREEN option that would protect your router from a session table flood.
Which configuration meets this requirement?

A. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
limit-session {
source-ip-based 1200;
destination-ip-based 1200;
}

B. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
udp {
flood threshold 5000;
}

C. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
icmp {
ip-sweep threshold 5000;
flood threshold 2000;
}

D. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
tcp {
syn-flood {
attack-threshold 2000;
destination-threshold 2000;
}

正解：A 解答を投票する

出題：10

Click the Exhibit button.
The router creates a log message with the daemon facility and info level.
Given the configuration in the exhibit, which three statements are true? (Choose three.)

A. The severity level will appear in the log message.

B. The message will be displayed on the CLI sessions of all users that are logged in.

C. The message will be sent to the syslog server at 192.168.1.1.

D. The message will be stored in the local file messages.

E. The message will be stored in the local file special.

正解：A,C,E 解答を投票する

JN0-330試験無料問題集「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) 認定」