Juniper Juniper Certifications JN0-333 Questions & Answers

• Question 21:

  Your network includes IPsec tunnels. One IPsec tunnel transits an SRX Series device with NAT configured. You must ensure that the IPsec tunnels function properly.

  Which statement is correct in this scenario?

  A. Persistent NAT should be enabled.

  B. NAT-T should be enabled.

  C. Destination NAT should be configured.

  D. A source address pool should be configured.

  Correct Answer: B

• Question 22:

  A session token on an SRX Series device is derived from what information? (Choose two.)

  A. routing instance

  B. zone

  C. screen

  D. MAC address

  Correct Answer: AB

• Question 23:

  You want to implement IPsec on your SRX Series devices, but you do not want to use a preshared key. Which IPsec implementation should you use?

  A. public key infrastructure

  B. next-hop tunnel binding

  C. tunnel mode

  D. aggressive mode

  Correct Answer: A

• Question 24:

  Which host-inbound-traffic security zone parameter would allow access to the REST API configured to listen on custom TCP port 5080?

  A. http

  B. all

  C. xnm-clear-text

  D. any-service

  Correct Answer: D

• Question 25:

  What are three defined zone types on an SRX Series device?

  A. dynamic

  B. junos-host

  C. null

  D. functional

  E. routing

  Correct Answer: BCD

• Question 26:

  Which two statements are true when implementing source NAT on an SRX Series device? (Choose two.)

  A. Source NAT is applied before the security policy search.

  B. Source NAT is applied after the route table lookup.

  C. Source NAT is applied before the route table lookup.

  D. Source NAT is applied after the security policy search.

  Correct Answer: BD

• Question 27:

  Which process describes the implementation of screen options on an SRX Series device?

  A. Configured screen options are only applied when traffic does not match a valid route.

  B. Configured screen options are applied only to the first packet that is processed in a stateful session.

  C. Configured screen options are applied to all packets that are processed by the stateful session firewall processor.

  D. Configured screen options are only applied when traffic does not match a valid policy.

  Correct Answer: C

• Question 28:

  Click the exhibit button.

  

  You are configuring security policies with Junos Space Security Director. Referring to the exhibit, which two statements are true? (Choose two.)

  A. The host device has three rules assigned to it.

  B. The policy assigned to the host device is published.

  C. The policy assigned to the host device requires publishing.

  D. The host device has two rules assigned to it.

  Correct Answer: BD

• Question 29:

  Click the Exhibit button.

  

  Referring to the exhibit, which statement is true?

  A. TCP packets entering the interface are failing the TCP sequence check.

  B. Packets entering the interface are being dropped due to a stateless filter.

  C. Packets entering the interface are getting dropped because there is no route to the destination.

  D. Packets entering the interface matching an ALG are getting dropped.

  Correct Answer: C

• Question 30:

  Click the Exhibit button.

  

  A customer would like to monitor their VPN using dead peer detection.

  Referring to the exhibit, for how many minutes was the peer down before the customer was notified?

  A. 5

  B. 3

  C. 4

  D. 2

  Correct Answer: A