최신Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) - JN0-330무료샘플문제

A. Source NAT with PAT does not work for ICMP traffic.

B. All source NAT pools have PAT enabled by default.

C. Source NAT with PAT does not allow address sharing.

D. Multiple source IP addresses can be translated to the same IP address in the pool.

A. static source pool

B. source pool without PAT

C. source pool with PAT

D. interface source pool

A. The egress interface IP address can be used for source NAT.

B. Source NAT does not require a security policy to function.

C. Destination NAT is required to translate the reply traffic.

D. Source NAT works only with source pools.

A. A zone defines a group of network segments with similar class-of-service requirements.

B. A zone defines the geographic region in which the router is deployed.

C. A zone defines a group of routers with a common management.

D. A zone defines a group of network segments with similar security requirements.

A. set routing-options static route 0.0.0.0/0 interface ge-0/0/0.0 gateway 192.168.1.1

B. set routing-options routes static 0.0.0.0/0 next-hop 192.168.1.1

C. set routing-options route 0.0.0.0/0 interface ge-0/0/0.0 next-hop 192.168.1.1

D. set routing-options static route 0.0.0.0/0 next-hop 192.168.1.1

A. distribute-list

B. route-map

C. policy-statement

D. prefix-list

A. router {
10.3.3.1;
}

B. default-gateway {
10.3.3.1;
}

C. gateway {
10.3.3.1;
}

D. next-router {
10.3.3.1;
}

A. [edit security cli]

B. [edit system cli]

C. [edit security services]

D. [edit system services]

A. DoS attacks are exploits in nature, while propagation attacks use trust relationships to take control of the devices.

B. Propagation attacks focus on suspicious packet formation using the DoS SYN-ACK- ACK proxy flood.

C. DoS attacks are directed at the network protection devices, while propagation attacks are directed at the servers.

D. Both DoS and propagation attacks exploit and take control of all unprotected network devices.

A. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
icmp {
ip-sweep threshold 5000;
flood threshold 2000;
}

B. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
tcp {
syn-flood {
attack-threshold 2000;
destination-threshold 2000;
}

C. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
udp {
flood threshold 5000;
}

D. [edit security screen]
user@hostl# show
ids-option protectFromFlood {
limit-session {
source-ip-based 1200;
destination-ip-based 1200;
}