최신Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC) - JN0-332무료샘플문제

A. You can have active/passive or active/active clusters

B. HA clusters must use NAT to prevent overlapping subnets between the nodes

C. Cluster nodes must be connected through a Layer 2 switch

D. Cluster nodes require an upgrade to HA compliant Routing Engines

A. [edit security interfaces]

B. [edit interfaces]

C. [edit system services]

D. [edit security zones]

A. Some traffic might be impacted when the active interfaces transition from Node1 to Node0 and the sessions are reestablished.

B. Node0 might be disabled once it loses connectivity Node1.

C. You would need to add a third RE to Node0 to handle the overload of traffic when Node I is taken offline.

D. The two REs on Node0 might become overwhelmed when the third and fourth active REs are taken offline on Node1.

A. NAT is processed in the control plane.

B. NAT is processed in the data plane.

C. NAT requires special hardware on SRX Series devices.

D. NAT is not supported on SRX Series devices.

A. IOC

B. PIM

C. SPC

D. RE

A. express AV

B. ICAP

C. full AV

D. desktop AV

A. [edit security ike]
user@host# show
gateway ike-phase1-gateway {
ike-policy ike-policy1;
address 10.10.10.1;
dead-peer-detection {
interval 20;
threshold 5;
}
external-interface ge-1/0/1.0;
}

B. [edit security ike]
user@host# show
gateway ike-phase1-gateway {
ike-policy ike1-policy;
address 10.10.10.1;
dead-peer-detection {
interval 20;
threshold 5;
}
external-interface ge-1/0/1.0;
}

C. [edit security ike]
user@host# show
gateway ike-phase1-gateway {
policy ike-policy1;
address 10.10.10.1;
dead-peer-detection {
interval 20;
threshold 5;
}
external-interface ge-1/0/1.0;
}

D. [edit security ike]
user@host# show
gateway ike-phase1-gateway {
policy ike1-policy;
address 10.10.10.1;
dead-peer-detection {
interval 20;
threshold 5;
}
external-interface ge-1/0/1.0;
}

A. 1.1.1.122

B. 1.1.1.1

C. 10.200.101.11

D. 10.200.101.12

A. www.company.com

B. 1.2.3.4

C. http://www.company.com/*

D. http://*.company.com

A. Ping is not allowed on either interface

B. SSH can connect on interface ge-0/0/1

C. An OSPF adjacency can e established on interface ge-0/0/3.

D. AN OSPF adjacency can be established on both interfaces

A. Do-Not-Fragment flag is set.

B. FIN flag is set and ACK flag is not set.

C. Both SYN and FIN flags are set.

D. Both ACK and PSH flags are set.

A. untrust

B. junos-global

C. trust

D. self

A. Once utilization is below 40 percent, the Junos OS will send an SNMP trap to the network management station to clear the alarm.

B. Once utilization is below 80 percent, the Junos OS will send an SNMP trap to the network management station to clear the alarm.

C. The network management station will require manual intervention to clear the alarm.

D. Once utilization is below 50 percent, the Junos OS will send an SNMP trap to the network management station to clear the alarm.

A. A zone defines the geographic region in which the security device is deployed.

B. A zone defines a group of network segments with similar class-of-service requirements.

C. A zone defines a group of security devices with a common management.

D. A zone defines a group of network segments with similar security requirements.

A. A security policy rule must be used on the ingress interface to match traffic to be processed as session based.

B. A stateless firewall filter must be used on the ingress interface to match traffic to be processed as session based.

C. A global security policy rule must be used on the ingress interface to match traffic to be processed as packet based.

D. A stateless firewall filter must be used on the ingress interface to match traffic to be processed as packet based.