Juniper Juniper Certifications JN0-333 Questions & Answers

• Question 51:

  Click the Exhibit button.

  

  The inside server must communicate with the external DNS server. The internal DNS server address is

  10.100.75.75. The external DNS server address is 75.75.76.76. Traffic from the inside server to the DNS server fails.

  Referring to the exhibit, what is causing the problem?

  A. The security policy must match the translated destination address.

  B. Source and static NAT cannot be configured at the same time.

  C. The static NAT rule must use the global address book entry name for the DNS server.

  D. The security policy must match the translated source and translated destination address.

  Correct Answer: A

• Question 52:

  Which interface is used exclusively to forward Ethernet-switching traffic between two chassis cluster nodes?

  A. swfab0

  B. fxp0

  C. fab0

  D. me0

  Correct Answer: A

• Question 53:

  Which three statements describes traditional firewalls? (Choose three.)

  A. A traditional firewall performs stateless packet processing.

  B. A traditional firewall offers encapsulation, authentication, and encryption.

  C. A traditional firewall performs stateful packet processing.

  D. A traditional firewall forwards all traffic by default.

  E. A traditional firewall performs NAT and PAT.

  Correct Answer: BCE

• Question 54:

  You must verify if destination NAT is actively being used by users connecting to an internal server from the

  Internet.

  Which action will accomplish this task on an SRX Series device?

  A. Examine the destination NAT translations table.

  B. Examine the installed routes in the packet forwarding engine.

  C. Examine the NAT translation table.

  D. Examine the active security flow sessions.

  Correct Answer: A

• Question 55:

  After an SRX Series device processes the first packet of a session, how are subsequent packets for the same session processed?

  A. They are processed using fast-path processing.

  B. They are forwarded to the control plane for deep packet inspection.

  C. All packets are processed in the same manner.

  D. They are queued on the outbound interface until a matching security policy is found.

  Correct Answer: A

• Question 56:

  You want to protect your SRX Series device from the ping-of-death attack coming from the untrust security zone.

  How would you accomplish this task?

  A. Configure the host-inbound-traffic system-services ping except parameter in the untrust security zone.

  B. Configure the application tracking parameter in the untrust security zone.

  C. Configure a from-zone untrust to-zone trust security policy that blocks ICMP traffic.

  D. Configure the appropriate screen and apply it to the [edit security zone security-zone untrust] hierarchy.

  Correct Answer: D

• Question 57:

  Which statement describes the function of screen options?

  A. Screen options encrypt transit traffic in a tunnel.

  B. Screen options protect against various attacks on traffic entering a security device.

  C. Screen options translate a private address to a public address.

  D. Screen options restrict or permit users individually or in a group.

  Correct Answer: B

• Question 58:

  What is the function of redundancy group 0 in a chassis cluster?

  A. Redundancy group 0 identifies the node controlling the cluster management interface IP addresses.

  B. The primary node for redundancy group 0 identifies the first member node in a chassis cluster.

  C. The primary node for redundancy group 0 determines the interface naming for all chassis cluster nodes.

  D. The node on which redundancy group 0 is primary determines which Routing Engine is active in the cluster.

  Correct Answer: D

• Question 59:

  Click the Exhibit button.

  

  You are monitoring traffic, on your SRX300 that was configured using the factory default security parameters. You notice that the SRX300 is not blocking traffic between Host A and Host B as expected.

  Referring to the exhibit, what is causing this issue?

  A. Host B was not assigned to the Untrust zone.

  B. You have not created address book entries for Host A and Host B.

  C. The default policy has not been committed.

  D. The default policy permits intrazone traffic within the Trust zone.

  Correct Answer: D

• Question 60:

  Which statement describes the function of NAT?

  A. NAT encrypts transit traffic in a tunnel.

  B. NAT detects various attacks on traffic entering a security device.

  C. NAT translates a public address to a private address.

  D. NAT restricts or permits users individually or in a group.

  Correct Answer: C