Juniper JN0-333 問題集

質問 1：
You want to ensure that any certificates used in your IPsec implementation do not expire while in use by your SRX Series devices.
In this scenario, what must be enabled on your devices?
A. TLS
B. RSA
C. SCEP
D. CRL
正解：C

質問 2：
Click the Exhibit button.

A customer would like to monitor their VPN using dead peer detection.
Referring to the exhibit, for how many minutes was the peer down before the customer was notified?
A. 2
B. 3
C. 4
D. 5
正解：D

質問 3：
Which statement is true when destination NAT is performed?
A. The destination IP address is translated according to the configured security policies and then the security destination NAT rules are applied.
B. The destination IP address is translated according to the configured destination NAT rules and then the security policies are applied.
C. The source IP address is translated according to the configured destination NAT rules and then the security policies are applied.
D. The destination IP address is translated according to the configured source NAT rules and then the security policies are applied.
正解：B

質問 4：
What is the function of redundancy group 0 in a chassis cluster?
A. Redundancy group 0 identifies the node controlling the cluster management interface IP addresses.
B. The primary node for redundancy group 0 identifies the first member node in a chassis cluster.
C. The node on which redundancy group 0 is primary determines which Routing Engine is active in the cluster.
D. The primary node for redundancy group 0 determines the interface naming for all chassis cluster nodes.
正解：C

質問 5：
Click the Exhibit button.

You have configured NAT on your network so that Host A can communicate with Server B.
You want to ensure that Host C can initiate communication with Host A using Host A's reflexive address.
Referring to the exhibit, which parameter should you configure on the SRX Series device to satisfy this requirement?
A. Configure persistent NAT with the target-host parameter.
B. Configure persistent NAT with the any-remote-host parameter.
C. Configure persistent NAT with the port-overloading parameter.
D. Configure persistent NAT with the target-host-port parameter.
正解：A

質問 6：
Click to the Exhibit button.
Referring to the exhibit, which two statements are true? (Choose two.)

A. Interface ge-0/0/1.0 will respond to pings.
B. Interfaces ge-0/0/0.0 and ge-0/0/1.0 will allow SSH connections.
C. Interface ge-0/0/0.0 will respond to pings.
D. Interface ge-0/0/0 will not accept SSH connections.
正解：A,B

質問 7：
Which statement is true about high availability (HA) chassis clusters for the SRX Series device?
A. There can be active/passive or active/active clusters.
B. Cluster nodes must be connected through a Layer 2 switch.
C. HA clusters must use NAT to prevent overlapping subnets between the nodes.
D. Cluster nodes require an upgrade to HA compliant Routing Engines.
正解：A