最新的JNCIS認證 JN0-331考試題庫

問題1

What are three main phases of an attack? (Choose three.)

A. DoS

B. propagation

C. exploit

D. reconnaissance

E. port scanning

正確答案: B,C,D

問題2

Which zone is a system-defined zone?

A. management zone

B. null zone

C. trust zone

D. untrust zone

正確答案: B

問題3

Which two statements about the Diffie-Hellman (DH) key exchange process are correct? (Choose two.)

A. In the DH key exchange process, the session key is passed across the network to the peer for confirmation.

B. In the DH key exchange process, the public and private keys are mathematically related using the DH algorithm.

C. In the DH key exchange process, the session key is never passed across the network.

D. In the DH key exchange process, the public and private keys are not mathematically related, ensuring higher security.

正確答案: B,C

問題4

What is the functionality of redundant interfaces (reth) in a chassis cluster?

A. reth interfaces are the same as physical interfaces.

B. reth interfaces are used only for VRRP.

C. reth interfaces are pseudo-interfaces that are considered the parent interface for two physical interfaces.

D. Each cluster member has a reth interface that can be used to share session state information with the other cluster members.

正確答案: C

問題5

What are three configuration objects used to build JUNOS IDP rules? (Choose three.)

A. detect objects?

B. zone objects

C. application objects?

D. policy objects

E. attack objects

正確答案: B,C,E

問題6

What is the purpose of an address book?

A. It defines hosts in a zone so they can be referenced by policies.

B. It maps hostnames to IP addresses to serve as a backup to DNS resolution.

C. It holds statistics about traffic to and from particular hosts.

D. It holds security policies for particular hosts.

正確答案: A

問題7

Which two statements are true regarding proxy ARP? (Choose two.)

A. JUNOS security devices can forward ARP requests to a remote device when proxy ARP is enabled.

B. Proxy ARP is enabled by default.

C. Proxy ARP is not enabled by default.

D. JUNOS security devices can reply to ARP requests intended for a remote device when proxy ARP is enabled.

正確答案: C,D

問題8

Click the Exhibit button.
[edit security policies]
user@host# show
from-zone Private to-zone External {
policy MyTraffic {
match {
source-address myHosts;
destination-address ExtServers;
application [ junos-ftp junos-bgp ];
}
then {
permit {
tunnel {
ipsec-vpn vpnTunnel;
}}}}}
policy-rematch;
In the exhibit, you decided to change myHosts addresses.
What will happen to the new sessions matching the policy and in-progress sessions that had
already matched the policy?

A. New sessions will halt until all in-progress sessions are re-evaluated. In-progress sessions will be re-evaluated and possibly dropped.

B. New sessions will be evaluated. All in-progress sessions will be dropped.

C. New sessions will be evaluated. All in-progress sessions will continue.

D. New sessions will be evaluated. In-progress sessions will be re-evaluated.

正確答案: D

問題9

Using a policy with the policy-rematch flag enabled, what happens to the existing and new sessions when you change the policy action from permit to deny?

A. The new sessions matching the policy are denied. The existing sessions continue until they are completed or their timeout is reached.

B. The new sessions matching the policy are denied. The existing sessions, not being allowed to carry any traffic, simply timeout.

C. The new sessions matching the policy might be allowed through if they match another policy. The existing sessions are dropped.

D. The new sessions matching the policy are denied. The existing sessions are dropped.

正確答案: D

最新的Juniper SEC,Specialist(JNCIS-SEC) - JN0-331免費考試真題

最新更新

站內鏈接

聯系我們