File Info
| Exam | Security, Specialist (JNCIS-SEC) |
| Number | JN0-333 |
| File Name | Juniper.JN0-333.Pass4Sure.2019-07-05.45q.vcex |
| Size | 1 MB |
| Posted | Jul 05, 2019 |
| Download | Juniper.JN0-333.Pass4Sure.2019-07-05.45q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
What are two supported hypervisors for hosting a vSRX? (Choose two.)
- VMware ESXi
- Solaris Zones
- KVM
- Docker
Correct answer: AC
Question 2
Which three Encapsulating Security Payload protocols do the SRX Series devices support with IPsec? (Choose three.)
- DES
- RC6
- TLS
- AES
- 3DES
Correct answer: ADE
Question 3
What are three characteristics of session-based forwarding, compared to packet-based forwarding, on an SRX Series device? (Choose three.)
- Session-based forwarding uses stateful packet processing.
- Session-based forwarding requires less memory.
- Session-based forwarding performs faster processing of existing session.
- Session-based forwarding uses stateless packet processing,
- Session-based forwarding uses six tuples of information.
Correct answer: ACE
Question 4
You have configured source NAT with port address translation. You also need to guarantee that the same IP address is assigned from the source NAT pool to a specific host for multiple concurrent sessions.
Which NAT parameter would meet this requirement?
- port block-allocation
- port range twin-port
- address-persistent
- address-pooling paired
Correct answer: D
Question 5
Which two statements about security policy actions are true? (Choose two.)
- The log action implies an accept action.
- The log action requires an additional terminating action.
- The count action implies an accept action.
- The count action requires an additional terminating action.
Correct answer: BD
Question 6
Which two statements are true about global security policies? (Choose two.)
- Global security policies are evaluated before regular security policies.
- Global security policies can be configured to match addresses across multiple zones.
- Global security policies can match traffic regardless of security zones.
- Global security policies do not support IPv6 traffic.
Correct answer: BC
Question 7
Which statement is true about functional zones?
- Functional zones are a collection of regulated transit network segments.
- Functional zones provide a means of distinguishing groups of hosts and their resources from one another.
- Functional zones are used for management.
- Functional zones are the building blocks for security policies.
Correct answer: C
Question 8
You have configured NAT on your network so that Host A can communicate with Server B. You want to ensure that Host C can initiate communication with Host A using Host A’s reflexive address.
Referring to the exhibit, which parameter should you configure on the SRX Series device to satisfy this requirement?
- Configure persistent NAT with the target-host parameter.
- Configure persistent NAT with the target-host-port parameter.
- Configure persistent NAT with the any-remote-host parameter.
- Configure persistent NAT with the port-overloading parameter.
Correct answer: A
Question 9
Which feature is used when you want to permit traffic on an SRX Series device only at specific times?
- scheduler
- pass-through authentication
- ALGs
- counters
Correct answer: A
Question 10
Which statement describes the function of NAT?
- NAT encrypts transit traffic in a tunnel.
- NAT detects various attacks on traffic entering a security device.
- NAT translates a public address to a private address.
- NAT restricts or permits users individually or in a group.
Correct answer: C
