[Free] 2018(Jan) EnsurePass Braindumps Juniper JN0-332 Dumps with VCE and PDF 261-270

Ensurepass.com : Ensure you pass the IT Exams
2018 Jan Juniper Official New Released JN0-332
100% Free Download! 100% Pass Guaranteed!
http://www.EnsurePass.com/JN0-332.html

Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC)

Question No: 261 – (Topic 3)

Which operational mode command displays all active IPsec phase 2 security associations?

  1. show ike security-associations

  2. show ipsec security-associations

  3. show security ike security-associations

  4. show security ipsec security-associations

Answer: D

Question No: 262 – (Topic 3)

How is the control plane separated from the data plane on branch SRX Series devices?

  1. by running separate kernels inside the Junos OS

  2. by dedicating a separate CPU core for the control plane

  3. by using separate CPUs for the control plane and data plane

  4. by offloading control plane traffic to the SPC

Answer: B

Question No: 263 – (Topic 3)

A policy-based IPsec VPN is ideal for which scenario?

  1. when you want to conserve tunnel resources

  2. when the remote peer is a dialup or remote access client

  3. when you want to configure a tunnel policy with an action of deny

  4. when a dynamic routing protocol such as OSPF must be sent across the VPN

Answer: B

Question No: 264 – (Topic 3)

Which zone is a system-defined zone?

  1. null zone

  2. trust zone

  3. untrust zone

  4. management zone

Answer: A

Question No: 265 – (Topic 3)

Which configuration must be completed to use both packet-based and session-based forwarding on a branch SRX Series Services Gateway?

  1. A stateless firewall filter must be used on the ingress interface to match traffic to be processed as session based.

  2. A security policy rule must be used on the ingress interface to match traffic to be processed as session based.

  3. A global security policy rule must be used on the ingress interface to match traffic to be processed as packet based.

  4. A stateless firewall filter must be used on the ingress interface to match traffic to be processed as packet based.

Answer: D

Question No: 266 – (Topic 3)

The branch SRX Series Services Gateways implement the data plane on which two components? (Choose two.)

  1. IOCs

  2. SPCs

  3. CPU cores

  4. PIMs

Answer: C,D

Question No: 267 – (Topic 3)

What are two interfaces created when enabling a chassis cluster? (Choose two.)

  1. st0

  2. fxp1

  3. fab0

  4. reth0

Answer: B,C

Question No: 268 – (Topic 3)

How does the antivirus feature operate once the antivirus license has expired?

  1. Any traffic matching a UTM policy will be dropped.

  2. Any traffic matching a UTM policy will be permitted.

  3. Any traffic matching a UTM policy will be correctly evaluated with the existing set of antivirus signatures.

  4. Any traffic matching a UTM policy will be permitted with a log message of no inspection.

Answer: C

Question No: 269 – (Topic 3)

Which statement correctly describes the default state of a high-end SRX Series Services Gateway?

  1. It forwards all traffic.

  2. It selectively forwards traffic based on default security policies.

  3. It selectively restricts traffic based on default security policies.

  4. It forwards no traffic.

Answer: D

Question No: 270 – (Topic 3)

Which two statements are true regarding proxy ARP? (Choose two.)

  1. Proxy ARP is enabled by default.

  2. Proxy ARP is not enabled by default.

  3. JUNOS security devices can forward ARP requests to a remote device when proxy ARP is enabled.

  4. JUNOS security devices can reply to ARP requests intended for a remote device when proxy ARP is enabled.

Answer: B,D

100% Ensurepass Free Download!
Download Free Demo:JN0-332 Demo PDF
100% Ensurepass Free Guaranteed!
JN0-332 Dumps

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.