Juniper JN0-330 問題集

質問 1：
What is the purpose of an address book?
A. It holds security policies for particular hosts.
B. It maps hostnames to IP addresses to serve as a backup to DNS resolution.
C. It holds statistics about traffic to and from particular hosts.
D. It defines hosts in a zone so they can be referenced by policies.
正解：D

質問 2：
Where do you configure SCREEN options?
A. interfaces you want to protect from attack
B. zones you want to protect from attack
C. zones on which an attack might arrive
D. interfaces on which an attack might arrive
正解：C

質問 3：
Which configuration shows a source NAT pool with no-port-translation?
A. [edit security nat]
user@host# show
interface ge-0/0/0.0 {
source-nat {
pool pool-1 {
address-range {
low 1.1.1.10 high 1.1.1.14;
}
no-port-translation;
}
B. [edit security nat]
user@host# show
interface ge-0/0/0.0 {
source-nat {
pool pool-1 {
address-range {
low 1.1.1.10 high 1.1.1.14 no-port-translation;
}
C. [edit security nat]
user@host# show
source-nat {
pool pool-1 {
address-range {
low 1.1.1.10 high 1.1.1.14 no-port-translation;
}
D. [edit security nat]
user@host# show
source-nat {
pool pool-1 {
address-range {
low 1.1.1.10 high 1.1.1.14;
}
no-port-translation;
}
正解：A

質問 4：
Regarding secure tunnel (st) interfaces, which statement is true?
A. You cannot assign st interfaces to a security zone.
B. You cannot apply static NAT on an st interface logical unit.
C. st interfaces are optional when configuring a route-based VPN.
D. A static route can reference the st interface logical unit as the next-hop.
正解：D

質問 5：
Users can define policy to control traffic flow between which two components? (Choose two.)
A. from a zone to the router itself
B. from a zone to the same zone
C. from a zone to a different zone
D. from one interface to another interface
正解：B,C

質問 6：
Which configuration shows a source NAT pool with no-port-translation?
A. [edit security nat]
user@host# show
interface ge-0/0/0.0 {
source-nat {
pool pool-1 {
address-range {
low 1.1.1.10 high 1.1.1.14;
}
no-port-translation;
}
B. [edit security nat]
user@host# show
interface ge-0/0/0.0 {
source-nat {
pool pool-1 {
address-range {
low 1.1.1.10 high 1.1.1.14 no-port-translation;
}
C. [edit security nat]
user@host# show
source-nat {
pool pool-1 {
address-range {
low 1.1.1.10 high 1.1.1.14 no-port-translation;
}
D. [edit security nat]
user@host# show
source-nat {
pool pool-1 {
address-range {
low 1.1.1.10 high 1.1.1.14;
}
no-port-translation;
}
正解：A

質問 7：
Click the Exhibit button.
In the exhibit, a host attached to interface ge-0/0/0.0 sends a SYN packet to open a Telnet connection to the router's ge-0/0/1.0 IP address.
What does the router do?

A. The router responds with a TCP SYN/ACK and opens the connection.
B. The router silently discards the packet.
C. The router sends back a TCP reset.
D. The router forwards the packet out the ge-0/0/1.0 interface.
正解：B

質問 8：
Click the Exhibit button.
In the exhibit, the router receives the first packet in a new session with the destination address 10.14.16.31.
What will be the output interface?

A. fe-2/0/0.0
B. se-4/0/0.0
C. se-3/0/0.0
D. ge-0/0/3.0
正解：B