Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC) - JN0-332 Exam Practice Test
You want to enable antivirus scanning on your SRX Series device. You want a solution that will scan individual data packets by a hardware pattern-matching engine with minimal impact on performance.
Which scanning method fulfils these requirements?
Which scanning method fulfils these requirements?
Correct Answer: A
Vote an answer
Click the Exhibit button.
-- Exhibit -
[edit security policies from-zone HR to-zone trust]
user@host# show
policy two {
match {
source-address subnet_a;
destination-address host_b;
application [ junos-telnet junos-ping ];
}
then {
reject;
}
}
policy one {
match {
source-address host_a;
destination-address subnet_b;
application any;
}
then {
permit;
}
}
-- Exhibit --
host_a is in subnet_a and host_b is in subnet_b.
Given the configuration shown in the exhibit, which two statements are true about traffic from host_a to host_b (Choose two.)?
-- Exhibit -
[edit security policies from-zone HR to-zone trust]
user@host# show
policy two {
match {
source-address subnet_a;
destination-address host_b;
application [ junos-telnet junos-ping ];
}
then {
reject;
}
}
policy one {
match {
source-address host_a;
destination-address subnet_b;
application any;
}
then {
permit;
}
}
-- Exhibit --
host_a is in subnet_a and host_b is in subnet_b.
Given the configuration shown in the exhibit, which two statements are true about traffic from host_a to host_b (Choose two.)?
Correct Answer: B,C
Vote an answer
-- Exhibit - -- Exhibit -
Click the Exhibit button.
Referring to the exhibit, which three statements are correct? (Choose three.)
Click the Exhibit button.
Referring to the exhibit, which three statements are correct? (Choose three.)
Correct Answer: A,B,C
Vote an answer
A user wants to establish an HTTP session to a server behind an SRX device but is being pointed to Web page on the SRX device for additional authentication. Which type of user authentication is configured?
Correct Answer: A
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
Which two are negotiated during Phase 2 of an IPsec VPN tunnel establishment? (Choose two.)
Correct Answer: C,D
Vote an answer
Click the Exhibit button.
[edit security zones security-zone trust]
user@host# show
host-inbound-traffic {
system-services {
all;
}}
interfaces {
ge-0/0/0.0;
}
Referring to the exhibit, which two traffic types are permitted when the destination is the ge0/0/0.0 IP address? (Choose two.)
[edit security zones security-zone trust]
user@host# show
host-inbound-traffic {
system-services {
all;
}}
interfaces {
ge-0/0/0.0;
}
Referring to the exhibit, which two traffic types are permitted when the destination is the ge0/0/0.0 IP address? (Choose two.)
Correct Answer: B,D
Vote an answer
Click the Exhibit button.
Given the configuration shown in the exhibit, which protocol(s) are allowed to communicate with the device on ge-0/0/0.0?
Given the configuration shown in the exhibit, which protocol(s) are allowed to communicate with the device on ge-0/0/0.0?
Correct Answer: D
Vote an answer
You are configuring an SRX Series device with policy rematching disabled. You change a permit policy to have an action of deny and commit the configuration.
Which statement is true?
Which statement is true?
Correct Answer: A
Vote an answer
What are two predefined address-book entries? (Choose two.)
Correct Answer: B,D
Vote an answer
A network administrator repeatedly receives support calls about network issues. After investigating the issues, the administrator finds that the source NAT pool is running out of addresses. To be notified that the pool is close to exhaustion, what should the administrator configure?
Correct Answer: B
Vote an answer
You are asked to implement the hashing algorithm that uses the most bits in the calculation on your Junos security device.
Which algorithm should you use?
Which algorithm should you use?
Correct Answer: C
Vote an answer