Juniper JN0-1330 問題集

質問 1：
A client wants to deploy a vSRX chassis cluster across two existing ESXi hosts without changing the
external switch configuration Which two actions must you perform to meet this requirement? (Choose
two.)
A. Use a distributed virtual switch
B. Use an overlay network to transport cluster heartbeats over Layer 3.
C. Use a standard virtual switch.
D. Configure private VLANs on the virtual switch (or the control and fabric links.
正解：A,D

質問 2：
As part of your branch office security design, you are asked to include the necessary features to address
these requirements;
-stop spam and phishing,
-stop viruses, Trojans, and spyware,
-control website access, and -control content
Which security feature set meets these requirements?
A. services offloading
B. stateless firewall filters
C. intrusion prevention system
D. unified threat management
正解：D

質問 3：
You are asked to deploy user access to the Internet, and you want to determine which applications are
passing through the firewall Which feature accomplishes this Task?
A. IPS
B. AppFW
C. AppTfack
D. AppQoS
正解：C

質問 4：
Your network design consists of two chassis clusters with the same cluster ID The reth0 interfaces of
each cluster are connected to the same Layer 2 network In this scenario, what will ensure uninterrupted
traffic?
A. One of the clusters should have a different number of physical interfaces in reth0.
B. One of the clusters should disable LACP on all redundant interfaces
C. One of the clusters should have reth0 configured under different redundancy groups
D. One of the clusters should not use reth0.
正解：C

質問 5：
What are the three activities in the reconnaissance phase of an attack"? (Choose three)
A. Install malware.
B. Scan for devices and ports to exploit
C. Determine the device OS
D. Propagate the virus to servers and workstations
E. Map the network
正解：B,C,E

質問 6：
An auditor reviewed your company's firewall configurations and is requiring that IPsec VPN connections
must not expose IKE identities during IKE negotiations Which two methods satisfy this requirement?
(Choose two)
A. Configure GRE over IPsec.
B. Use aggressive mode for the IKE policy.
C. Use IKEv2 instead of IKEvI.
D. Use main mode for the IKE policy.
正解：D