Juniper JN0-333 問題集

質問 1：
Which two modes are supported during the Phase 1 IKE negotiations used to establish an IPsec tunnel?
(Choose two.)
A. main mode
B. aggressive mode
C. tunnel mode
D. transport mode
正解：A,B

質問 2：
Which statement is true about Perfect Forward Secrecy (PFS)?
A. PFS is used to resolve compatibility issues with third-party IPsec peers.
B. PFS increases the IPsec VPN encryption key length and uses RSA or DSA certificates.
C. PFS is implemented during Phase 1 of IKE negotiations and decreases the amount of time required for IKE negotiations to complete.
D. PFS increases security by forcing the peers to perform a second DH exchange during Phase 2.
正解：D

質問 3：
You want to trigger failover of redundancy group 1 currently running on node 0 and make node 1 the primary node the redundancy group 1.
Which command would be used accomplish this task?
A. user@host# set chassis cluster redundancy-group 1 node 1
B. user@host> request chassis cluster failover reset redundancy-group 1
C. user@host# set chassis cluster redundancy-group 1 preempt
D. user@host> request chassis cluster failover redundancy-group 1 node 1
正解：D

質問 4：
Click the Exhibit button.

Referring to the exhibit, what will happen if client 172.16.128.50 tries to connect to destination 192.168.150.3 using HTTP?
A. The client will be permitted by policy p1.
B. The client will be denied by policy p3.
C. The client will be permitted by the global policy.
D. The client will be denied by policy p2.
正解：A

質問 5：
A link from the branch SRX Series device chassis cluster to the Internet requires more bandwidth.
In this scenario, which command would you issue to begin provisioning a second link?
A. set chassis cluster redundancy-group 1 node 1 priority 1
B. set interfaces ge-0/0/1 gigether-options redundant-parent reth1
C. set chassis cluster reth-count 2
D. set interfaces fab0 fabric-options member-interfaces ge-0/0/1
正解：D

質問 6：
In a chassis cluster, which two characteristics are true regarding reth interfaces? (Choose two.)
A. A reth interface goes down if one of its child interfaces become unavailable.
B. Reth interfaces must be the same type of interface.
C. A reth interface inherits its failover properties from a redundancy group.
D. Reth interfaces must be in the same slots on each node.
正解：B,C

質問 7：
Click the exhibit button.

You are configuring security policies with Junos Space Security Director.
Referring to the exhibit, which two statements are true? (Choose two.)
A. The policy assigned to the host device requires publishing.
B. The host device has three rules assigned to it.
C. The policy assigned to the host device is published.
D. The host device has two rules assigned to it.
正解：C,D