Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) - JN0-330 Exam Practice Test

A. Define the zone as a security or functional zone.

B. Define a default policy for the zone.

C. Assign logical interfaces to the zone.

D. Assign physical interfaces to the zone.

A. show ipsec security-associations

B. show security ike security-associations

C. show ike security-associations

D. show security ipsec security-associations

A. syn-fin, fin-no-ack, and tcp-no-frag

B. syn-fin, port-scan, and tcp-no-flag

C. syn-fin, syn-flood, and tcp-no-frag

D. syn-fin, syn-ack-ack-proxy, and tcp-no-frag

A. IP address 71.33.252.17 and TCP port 80

B. IP address 10.10.10.1 and TCP port 8080

C. IP address 71.33.251.19 and TCP port 80

D. IP address 71.33.252.19 and TCP port 8080

A. set security zones functional-zone management interfaces ge-0/0/0.0

B. set security zones management interfaces ge-0/0/0.0

C. set security zones functional-zone out-of-band interfaces ge-0/0/0.0

D. set zones functional-zone management interfaces ge-0/0/0.0

A. conserving public IP addresses

B. allowing stateful packet inspection

C. preventing unauthorized connections from outside the network

D. enabling network migrations

A. The untrust zone does not have a management policy configured.

B. The security policy from the trust zone to the untrust zone does not permit ping.

C. No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.

D. The trust zone does not have ping enabled as host-inbound-traffic service.

A. The OSPF backbone area contains Type 5 LSAs, while not-so-stubby areas contain Type 7 LSAs.

B. The OSPF backbone area contains all routes, while other OSPF areas contain only summary routes.

C. OSPF not-so-stubby areas do not have any Type 5 LSAs, while the backbone area contains Type 7 LSAs.

D. OSPF stub areas do not have any Type 5 LSAs, while totally stubby areas do not have any Type 5, 3, and 4 LSAs.

A. This interface will not exist because J6350 routers have only six slots.

B. This interface is a system-created interface.

C. This interface belongs to NODE1 of the cluster.

D. This interface belongs to NODE0 of the cluster.

A. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
icmp {
ip-sweep threshold 5000;
flood threshold 2000;
}

B. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
limit-session {
source-ip-based 1200;
destination-ip-based 1200;
}

C. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
udp {
flood threshold 5000;
}

D. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
tcp {
syn-flood {
attack-threshold 2000;
destination-threshold 2000;
}