JN0-330問題集、Juniper実際の試験問題

質問 1

Which type of zone is used by traffic transiting the device?

A. default zone

B. security zone

C. transit zone

D. functional zone

正解: B

質問 2

Which two statements about the Diffie-Hellman (DH) key exchange process are correct?
(Choose two.)

A. In the DH key exchange process, the private key values are exchanged across the network.

B. In the DH key exchange process, each router creates a unique public and private keys that are mathematically related by the DH algorithm.

C. In the DH key exchange process, the public key values are exchanged across the network.

D. In the DH key exchange process, each router creates a common public and a unique private key that are mathematically related by the DH algorithm.

正解: B,C

質問 3

Click the Exhibit button.
A flow of HTTP traffic needs to go from HOSTA to HOSTB through a router. Assume that traffic will initiate from HOSTA and that HOSTA is in zone trust and HOSTB is in zone untrust.
What will happen to the traffic given the configuration in the exhibit?

A. The traffic will be permitted by policy AllowHTTP.

B. The traffic will be permitted by policy AllowHTTP2.

C. The traffic will be permitted by policy AllowHTTP3.

D. The traffic will be dropped as no policy match will be found.

正解: C

質問 4

Click the Exhibit button. In the exhibit, which two statements accurately describe the information about the interface se-1/0/1.605? (Choose two.)

A. The interface se-1/0/1.605 belongs to trust zone and is connected to the Frame Relay network.

B. The interface se-1/0/1.605 allows only host-inbound traffic identified in the command output; no other traffic can transit the interface.

C. The interface's IP address is 192.18.36.11.

D. The interface's IP address is 172.18.36.9.

正解: A,D

質問 5

Using a policy with the policy-rematch flag enabled, what happens to the existing and new sessions when you change the policy action from permit to deny?

A. The new sessions matching the policy might be allowed through if they match another policy. The existing sessions are dropped.

B. The new sessions matching the policy are denied. The existing sessions, not being allowed to carry any traffic, simply timeout.

C. The new sessions matching the policy are denied. The existing sessions are dropped.

D. The new sessions matching the policy are denied. The existing sessions continue until they are completed or their timeout is reached.

正解: C

質問 6

Users can define policy to control traffic flow between which two components? (Choose two.)

A. from a zone to the same zone

B. from one interface to another interface

C. from a zone to a different zone

D. from a zone to the router itself

正解: A,C

質問 7

What is the purpose of an address book?

A. It defines hosts in a zone so they can be referenced by policies.

B. It maps hostnames to IP addresses to serve as a backup to DNS resolution.

C. It holds security policies for particular hosts.

D. It holds statistics about traffic to and from particular hosts.

正解: A

Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) - JN0-330 模擬練習