Juniper SEC,Specialist(JNCIS-SEC) - JN0-331 Exam Practice Test

A. [edit security nat source]
user@host# show
pool A {
address {207.17.137.1/32 to 207.17.137.254/32;
}
port no-translation;
}
rule-set 1A {
from zone trust;
to zone untrust;
rule 1 {
match {
source-address 10.1.10.0/24;
}
then {
source-nat pool A;
}}}

B. [edit security nat source]
user@host# show
pool A {
address { 207.17.137.1/32 to 207.17.137.254/32;
}
overflow-pool interface;
}
rule-set 1A {
from zone trust;
to zone untrust;
rule 1 {
match {
source-address 10.1.10.0/24;
}
then {
source-nat pool A;
port no-translation;
}}}

C. [edit security nat source]
user@host# show
pool A {
address {207.17.137.1/32 to 207.17.137.254/32;
}
overflow-pool interface;
}
rule-set 1A {
from zone trust;
to zone untrust;
rule 1 {
match {
source-address 10.1.10.0/24;
}
then {
source-nat pool A;
}}}

D. [edit security nat source]
user@host# show
pool A {
address { 207.17.137.1/32 to 207.17.137.254/32;
}}
rule-set 1A {
from zone trust;
to zone untrust;
rule 1 {
match {
source-address 10.1.10.0/24;
}
then {
source-nat pool A;
port no-translation;
}}
}

A. An attacker can decrypt data if the attacker captures the key used for encryption.

B. It is commonly used to create digital certificate signatures.

C. It uses two keys: one for encryption and a different key for decryption.

D. The same key is used for encryption and decryption.

A. 2

B. 4

C. 3

D. 1

A. IP address

B. security policy

C. routing-instance

D. interface

A. from a zone to the same zone

B. from a zone to the device itself

C. from one interface to another interface

D. from a zone to a different zone

A. Each cluster member has a reth interface that can be used to share session state information with the other cluster members.

B. reth interfaces are pseudo-interfaces that are considered the parent interface for two physical interfaces.

C. reth interfaces are the same as physical interfaces.

D. reth interfaces are used only for VRRP.