Juniper JN0-330 問題集

質問 1：
Which command would you use to display input errors on the se-1/0/1 interface?
A. user@host> show interfaces se-1/0/1 extensive
B. user@host> show interfaces se-1/0/1 errors
C. user@host> show interfaces se-1/0/1 detailed
D. user@host> show interfaces detail se-1/0/1
正解：A

質問 2：
In JUNOS software with enhanced services, which three packet elements are inspected to determine if a session already exists? (Choose three.)
A. IP protocol
B. source and destination IP address
C. source and destination MAC address
D. IP time-to-live
E. source and destination TCP/UDP port
正解：A,B,E

質問 3：
What is the functionality of redundant interfaces (RETH) in a JSRP cluster?
A. RETH interfaces are used only for VRRP.
B. Each cluster member has a RETH interface that can be used to share session state information with the other cluster members.
C. RETH interfaces are the same as physical interfaces.
D. RETH interfaces are logical interfaces that are considered the parent interface for two physical interfaces.
正解：D

質問 4：
What are two uses of NAT? (Choose two.)
A. allowing stateful packet inspection
B. preventing unauthorized connections from outside the network
C. conserving public IP addresses
D. allowing networks with overlapping private address space to communicate
正解：C,D

質問 5：
Your task is to provision the router running JUNOS software with enhanced services to permit transit packets from the Private zone to the External zone by using an IPSec VPN and log information at the time of session close.
Which configuration meets this requirement?
A. [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
log {
session-close;
}
B. [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
log;
count session-close;
}
C. [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
count {
session-close;
}
D. [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
log {
session-init;
}
正解：A

質問 6：
Which two configurations are valid? (Choose two.)
A. [edit routing-instances]
foo {
interface ge-0/0/3.0;
interface ge-0/0/2.102;
}
bar {
interface ge-0/0/0.0;
interface ge-0/0/3.0;
}
B. [edit routing-instances]
user@host# show
foo {
interface ge-0/0/3.0;
interface ge-0/0/2.102;
}
bar {
interface ge-0/0/0.0;
interface ge-0/0/3.0;
}
C. [edit security zones]
user@host# show
security-zone foo {
interfaces {
ge-0/0/1.0;
ge-0/0/3.0;
}
security-zone bar {
interfaces {
ge-0/0/2.0;
ge-0/0/3.102;
}
D. [edit security zones]
user@host# show
security-zone foo {
interfaces {
ge-0/0/1.0;
ge-0/0/2.0;
}
security-zone bar {
interfaces {
ge-0/0/1.0;
ge-0/0/3.0;
}
正解：A,C

質問 7：
Assuming the default policy action is deny, which two of the following must you configure for IPv4 transit traffic to pass between the ge-0/0/0.0 and ge-0/0/2.0 interfaces? (Choose two.)
A. family inet on each logical interface
B. a host-inbound-traffic section for each logical interface
C. a routing instance for each logical interface
D. a security zone for each logical interface
正解：A,D

質問 8：
What is the purpose of a zone in the JUNOS software with enhanced services?
A. A zone defines a group of network segments with similar class-of-service requirements.
B. A zone defines a group of routers with a common management.
C. A zone defines a group of network segments with similar security requirements.
D. A zone defines the geographic region in which the router is deployed.
正解：C