Juniper JN0-332 問題集

質問 1：
Which IDP policy action closes the connection and sends an RST packet to both the client and the server?
A. terminate-session
B. close-client-and-server
C. close-connection
D. terminate-connection
正解：B

質問 2：
-- Exhibit --
[edit security nat]
user@host# show source
pool pool-one {
address {
68.183.13.0/24;
}
}
rule-set trust-to-untrust {
from zone trust;
to zone untrust;
rule pool-nat {
match {
source-address 10.10.10.1/24;
}
then {
source-nat {
pool {
pool-one;
}
}
}
}
rule no-nat {
match {
destination-address 192.150.2.140/32;
}
then {
source-nat {
off;
}
}
}
}
-- Exhibit --
Click the Exhibit button.
You have implemented source NAT using a source pool for address translation. However, traffic destined for 192.150.2.140 should not have NAT applied to it. The configuration shown in the exhibit is not working correctly.
Which change is needed to correct this problem?
A. Insert no-nat before pool-nat.
B. Proxy ARP needs to be applied on the 192.150.2.140 address for the rule to function.
C. The no-nat rule should be in a separate rule-set.
D. Destination NAT should be used to exclude the traffic destined for 192.150.2.140.
正解：A

質問 3：
What are two valid match conditions for source NAT? (Choose two.)
A. source address
B. destination address
C. source port
D. port range
正解：A,B

質問 4：
You are configuring the SRX Series Services Gateway in chassis cluster mode.
What is a valid way to configure Redundancy Groups (RGs) 1 and 2 for active/active redundancy?
A. Configure RG 1 and RG 2 primary for Node 1
B. Configure RG 1 primary for Node 0 and RG 2 primary for Node 1
C. Configure RG 1 and RG 2 primary for Node 0
D. Configure RG 0 primary for Node 0
正解：B

質問 5：
A network administrator is using source NAT for traffic from source network 10.0.0.0/8. The administrator must also disable NAT for any traffic destined to the 202.2.10.0/24 network.Which configuration would accomplish this task?
A. [edit security nat source rule-set test]
user@host# show
from zone trust;
to zone untrust;
rule A {
match {
source-address 10.0.0.0/8;
}
then {
source-nat {
pool {
A;
}
}
}
}
B. [edit security nat source]
user@host# show rule-set test
from zone trust;
to zone untrust;
rule 1 {
match {
destination-address 202.2.10.0/24;
}
then {
source-nat {
off;
}
}
}
rule 2 {
match {
source-address 10.0.0.0/8;
}
then {
source-nat {
pool {
A;
}
}
}
}
C. [edit security nat source rule-set test]
user@host# show
from zone trust;
to zone untrust;
rule A {
match {
source-address 202.2.10.0/24;
}
then {
source-nat {
pool {
A;
}
}
}
}
rule B {
match {
destination-address 10.0.0.0/8;
}
then {
source-nat {
off;
}
}
}
D. [edit security nat source rule-set test]
user@host# show
from zone trust;
to zone untrust;
rule A {
match {
source-address 10.0.0.0/8;
}
then {
source-nat {
pool {
A;
}
}
}
}
rule B {
match {
destination-address 202.2.10.0/24;
} then { source-nat { off; } } }
正解：B

質問 6：
You have deployed enhanced Web filtering on an SRX Series device. A user requests a URL that is not in the URL filtering cache.
What happens?
A. The request is permitted immediately but the SRX device then requests the category from the configured server and caches the response for use with subsequent requests.
B. The request is blocked immediately but the SRX device then requests the category from the configured server and caches the response for use with subsequent requests.
C. The SRX device requests the category from the configured server. Once the response is received, the SRX device processes the request against the policy based on the information received and caches the response.
D. The SRX device will either permit or deny the request immediately depending on the configuration in the UTM policy. The SRX device then requests the category from the central server and caches the response for use with subsequent requests.
正解：C