Download Security, Specialist (JNCIS-SEC).JN0-333.Prep4Sure.2018-12-23.42q.vcex

Vendor: Juniper
Exam Code: JN0-333
Exam Name: Security, Specialist (JNCIS-SEC)
Date: Dec 23, 2018
File Size: 1 MB
Download Exam

How to open VCEX files?

Files with VCEX extension can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAM_HUB

Discount: 20%

ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator ProfExam Simulator

Demo Questions

Question 1
Which two statements about security policy actions are true? (Choose two.)
  1. The log action implies an accept action.
  2. The log action requires an additional terminating action.
  3. The count action implies an accept action.
  4. The count action requires an additional terminating action.
Correct answer: BD
Question 2
Which two statements are true about global security policies? (Choose two.) 
  1. Global security policies are evaluated before regular security policies.
  2. Global security policies can be configured to match addresses across multiple zones.
  3. Global security policies can match traffic regardless of security zones.
  4. Global security policies do not support IPv6 traffic.
Correct answer: BC
Question 3
Which statement is true about functional zones?
  1. Functional zones are a collection of regulated transit network segments.
  2. Functional zones provide a means of distinguishing groups of hosts and their resources from one another.
  3. Functional zones are used for management.
  4. Functional zones are the building blocks for security policies.
Correct answer: C
Question 4
You have recently configured an IPsec tunnel between two SRX Series devices. One of the devices is assigned an IP address using DHCP with an IP address that changes frequently. Initial testing indicates that the IPsec tunnel is not working. Troubleshooting has revealed that Phase 1 negotiations are failing. 
Which two actions would solve the problem? (Choose two.)
  1. Verify that the device with the IP address assigned by DHCP is the traffic initiator.
  2. Verify that VPN monitoring is enabled.
  3. Verify that the IKE policy is configured for aggressive mode.
  4. Verify that PKI is properly configured.
Correct answer: AC
Question 5
  
You have configured NAT on your network so that Host A can communicate with Server B. You want to ensure that Host C can initiate communication with Host A using Host A’s reflexive address. 
Referring to the exhibit, which parameter should you configure on the SRX Series device to satisfy this requirement?
  1. Configure persistent NAT with the target-host parameter.
  2. Configure persistent NAT with the target-host-port parameter.
  3. Configure persistent NAT with the any-remote-host parameter.
  4. Configure persistent NAT with the port-overloading parameter.
Correct answer: A
Question 6
Which feature is used when you want to permit traffic on an SRX Series device only at specific times? 
  1. scheduler
  2. pass-through authentication
  3. ALGs
  4. counters
Correct answer: A
Question 7
Which statement describes the function of NAT?
  1. NAT encrypts transit traffic in a tunnel.
  2. NAT detects various attacks on traffic entering a security device.
  3. NAT translates a public address to a private address.
  4. NAT restricts or permits users individually or in a group.
Correct answer: C
Question 8
  
You are monitoring traffic, on your SRX300 that was configured using the factory default security parameters. You notice that the SRX300 is not blocking traffic between Host A and Host B as expected. 
Referring to the exhibit, what is causing this issue?
  1. Host B was not assigned to the Untrust zone.
  2. You have not created address book entries for Host A and Host B.
  3. The default policy has not been committed.
  4. The default policy permits intrazone traffic within the Trust zone.
Correct answer: D
Question 9
What is the function of redundancy group 0 in a chassis cluster? 
  1. Redundancy group 0 identifies the node controlling the cluster management interface IP addresses.
  2. The primary node for redundancy group 0 identifies the first member node in a chassis cluster.
  3. The primary node for redundancy group 0 determines the interface naming for all chassis cluster nodes.
  4. The node on which redundancy group 0 is primary determines which Routing Engine is active in the cluster.
Correct answer: D
Explanation:
Question 10
You want to protect your SRX Series device from the ping-of-death attack coming from the untrust security zone. 
How would you accomplish this task?
  1. Configure the host-inbound-traffic system-services ping except parameter in the untrust security zone.
  2. Configure the application tracking parameter in the untrust security zone.
  3. Configure a from-zone untrust to-zone trust security policy that blocks ICMP traffic.
  4. Configure the appropriate screen and apply it to the [edit security zone security-zone untrust] hierarchy.
Correct answer: D
CONNECT US
HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset

HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen

ProfExam
ProfExam at a 20% markdown

You have the opportunity to purchase ProfExam at a 20% reduced price

Get Now!