JN0-332 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

/ 132

Question No : 1
What is the maximum number of layers of compression that kaspersky-lab-engine (full AV) can decompress for the HTTP protocol?

A.1
B.4
C.8
D.16

正解:

Question No : 2
Which two statements are true about pool-based source NAT? (Choose two.)

A.PAT is not supported.
B.PAT is enabled by default.
C.It supports the address-persistent configuration option.
D.It supports the junos-global configuration option.

正解:

Question No : 3
Click the Exhibit button.

Given the configuration shown in the exhibit, which configuration object would be used to
associate both Nancy and Walter with firewall user authentication within a security policy?

A.ftp-group
B.ftp-users
C.firewall-user
D.nancy and walter

正解:

Question No : 4
Click the Exhibit button.

In the configuration shown in the exhibit, you decided to eliminate the junos-ftp application from the match condition of the policy MyTraffic.What will happen to the existing FTP and
BGPsessions?

A.The existing FTP and BGP sessions will continue.
B.The existing FTP and BGP sessions will be re-evaluated and only FTP sessions will be dropped.
C.The existing FTP and BGP sessions will be re-evaluated and all sessions will be dropped.
D.The existing FTP sessions will continue and only the existing BGP sessions will be dropped.

正解:

Question No : 5
Which interface is used for RTO synchronization and forwarding traffic between the devices in a cluster?

A.the st interface
B.the reth interface
C.the fxp1 and fxp0 interfaces
D.the fab0 and fab1 interfaces

正解:

Question No : 6
Which two packet attributes contribute to the identification of a session? (Choose two.)

A.destination port
B.TTL
C.IP options
D.protocol number

正解:

Question No : 7
On which component is the control plane implemented?

A.IOC
B.PIM
C.RE
D.SPC

正解:

Question No : 8
Click the Exhibit button.
Referring to the exhibit, what is the correct proxy-id?

A.local 1.1.1.0/24, remote 2.1.1.0/24
B.local 2.1.1.0/24, remote 1.1.1.0/24
C.local 12.1.1.0/24, remote 11.1.1.0/24
D.local 11.1.1.0/24, remote 12.1.1.0/24

正解:

Question No : 9
Which two statements are true about AH? (Choose two.)

A.AH provides data integrity.
B.AH is identified by IP protocol 50.
C.AH is identified by IP protocol 51.
D.AH cannot work in conjunction with ESP

正解:

Question No : 10
What are three valid Juniper Networks IPS attack object types? (Choose three.)

A.signature
B.anomaly
C.trojan
D.virus
E.chain

正解:

Question No : 11
Content filtering enables traffic to be permitted or blocked based on inspection of which three types of content? (Choose three.)

A.MIME pattern
B.file extension
C.IP spoofing
D.POP3
E.protocol command

正解:

Question No : 12
Antispam can be leveraged with which two features on a branch SRX Series device to provide maximum protection from malicious e-mail content? (Choose two.)

A.integrated Web filtering
B.full AV
C.IPS
D.local Web filtering

正解:

Question No : 13
Click the Exhibit button.

Referring to the exhibit, which statement contains the correct gateway parameters?

A.[edit security ike] [email protected]# show gateway ike-phase1-gateway { policy ike-policy1; address 10.10.10.1; dead-peer-detection { interval 20; threshold 5; } external-interface ge-1/0/1.0; }
B.[edit security ike] [email protected]# show gateway ike-phase1-gateway { ike-policy ike-policy1; address 10.10.10.1; dead-peer-detection { interval 20; threshold 5; } external-interface ge-1/0/1.0; }
C.[edit security ike] [email protected]# show gateway ike-phase1-gateway { policy ike1-policy; address 10.10.10.1; dead-peer-detection { interval 20; threshold 5; } external-interface ge-1/0/1.0; }
D.[edit security ike] [email protected]# show gateway ike-phase1-gateway { ike-policy ike1-policy; address 10.10.10.1; dead-peer-detection { interval 20; threshold 5; } external-interface ge-1/0/1.0; }

正解:

Question No : 14
Which two statements are true about the Websense redirect Web filter solution? (Choose two.)

A.The Websense redirect Web filter solution does not require a license on the SRX device.
B.The Websense server provides the SRX device with a category for the URL and the SRX device then matches the category with its configured polices and decides to permit or deny the UR
C.The Websense server provides the SRX device with a decision as to whether the SRX device permits or denies the UR
D.When the Websense server does not know the category of the URL, it sends a request back to the SRX device to validate against the integrated SurfControl server in the cloud.

正解:

Question No : 15
Which antivirus solution integrated on branch SRX Series devices do you use to ensure maximum virus coverage for network traffic?

A.express AV
B.full AV
C.desktop AV
D.ICAP

正解:

Juniper JN0-332 問題練習