当前分类： JN0-331
问题：多选题Which three methods of source NAT does JUNOS Software support？（）Ainterface-based source NATBsource NAT with address shiftingCsource NAT using static source poolDinterface-based source NAT without PATEsource NAT with address shifting and PAT...
查看答案
问题：单选题An attacker sends a low rate of TCP SYN segments to hosts， hoping that at least one port replies. Which type of an attack does this scenario describe？（）A DoSB SYN floodC port scanningD IP address sweep...
问题：单选题When devices are in cluster mode， which new interfaces are created？（）A No new interface is created.B Only the st interface is created.C fxp1， fab0， and fab1 are created.D st，fxp1，reth，fab0，and fab1 are created....
问题：多选题Which two statements about JUNOS Software packet handling are correct？（）AJUNOS Software applies service ALGs only for the first packet of a flow.BJUNOS Software uses fast-path processing only for the first packet of a flow.CJUNOS Software performs rout...
问题：多选题Which two firewall user authentication objects can be referenced in a security policy？（）Aaccess profileBclient groupCclientDdefault profile...
问题：单选题Regarding secure tunnel （st） interfaces， which statement is true？（）A You cannot assign st interfaces to a security zone.B You cannot apply static NAT on an st interface logical unit.C st interfaces are optional when configuring a route-based VPND A sta...
问题：单选题Which statement is true about source NAT？（）A Source NAT works only with source pools.B Destination NAT is required to translate the reply traffic.C Source NAT does not require a security policy to function.D The egress interface IP address can be used ...
问题：多选题Which two statements describe the purpose of a security policy？（）AIt enables traffic counting and logging.BIt enforces a set of rules for transit traffic.CIt controls host inbound services on a zone.DIt controls administrator rights to access the devic...
问题：单选题Which statement regarding the implementation of an IDP policy template is true？（）A IDP policy templates are automatically installed as the active IDP policy.B IDP policy templates are enabled using a commit script.C IDP policy templates can be download...
问题：多选题Which two statements regarding external authentication servers for firewall userauthentication are true？（）AUp to three external authentication server types can be used simultaneously.BOnly one external authentication server type can be used simultaneou...
问题：单选题By default， which condition would cause a session to be removed from the session table？（）A Route entry for the session changed.B Security policy for the session changed.C The ARP table entry for the source IP address timed out.D No traffic matched the ...
问题：多选题Users can define policy to control traffic flow between which two components？（）Afrom a zone to the device itselfBfrom a zone to the same zoneCfrom a zone to a different zoneDfrom one interface to another interface...
问题：单选题Regarding zone types， which statement is true？（）A You cannot assign an interface to a functional zone.B You can specifiy a functional zone in a security policy.C Security zones must have a scheduler applied.D You can use a security zone for traffic des...
问题：多选题What are two uses of NAT？（）Aconserving public IP addressesBallowing stateful packet inspectionCpreventing unauthorized connections from outside the networkDallowing networks with overlapping private address space to communicate...
问题：多选题Which three statements are true when working with high-availability clusters？（）AThe valid cluster-id range is between 0 and 255.BJUNOS security devices can belong to more than one cluster if cluster virtualization is enabled.CIf the cluster-id value is...
问题：单选题What is the default session timeout for UDP sessions？（）A 30 secondsB 1 minuteC 5 minutesD 30 minutes...
问题：单选题Which zone is a system-defined zone？（）A null zoneB trust zoneC untrust zoneD management zone...
问题：多选题What are two interfaces created when enabling a chassis cluster？（）Ast0Bfxp1Cfab0Dreth0...
