Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) - JN0-330 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Click the Exhibit button.
All system services have been enabled.
Given the configuration shown in the exhibit, which interface allows both ping and SSH traffic?

A. ge-0/0/1.0 B. ge-0/0/3.0 C. ge-0/0/0.0 D. ge-0/0/2.0

Discussion 0

Correct Answer: C Vote an answer

Question 2

What are three main phases of an attack? (Choose three.)

A. port scanning B. propagation C. exploit D. reconnaissance E. DoS

Discussion 0

Correct Answer: B,C,D Vote an answer

Question 3

Which statement describes the behavior of a security policy?

A. A security policy is never required to permit transit traffic. B. Traffic originated from the router itself must be permitted by configuring a security policy. C. The implicit default security policy permits all traffic. D. Traffic destined to the router incoming interface does not require a security policy.Traffic destined to the router? incoming interface does not require a security policy.

Discussion 0

Correct Answer: D Vote an answer

Question 4

Interface ge-0/0/2.0 of your router is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A host with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. This host is attached to the ge-0/0/0.0 interface of your router. You must use interface-based static NAT to make the HTTP service on the host reachable from the Internet.
On which IP address and TCP port can Internet hosts reach the HTTP service?

A. IP address 71.33.252.17 and TCP port 80 B. IP address 71.33.251.19 and TCP port 80 C. IP address 10.10.10.1 and TCP port 8080 D. IP address 71.33.252.19 and TCP port 8080

Discussion 0

Correct Answer: D Vote an answer

Question 5

Click the Exhibit button.
Based on the exhibit, client PC 192.168.10.10 cannot ping 1.1.1.2.
Which is a potential cause for this problem?

A. The security policy from the trust zone to the untrust zone does not permit ping. B. The trust zone does not have ping enabled as host-inbound-traffic service. C. The untrust zone does not have a management policy configured. D. No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.

Discussion 0

Correct Answer: A Vote an answer

Question 6

Which statement is true about source NAT?

A. Source NAT works only with source pools. B. Source NAT does not require a security policy to function. C. The egress interface IP address can be used for source NAT. D. Destination NAT is required to translate the reply traffic.

Discussion 0

Correct Answer: C Vote an answer

Question 7

Two VPN peers are negotiating IKE phase 1 using main mode. Which message pair in the negotiation contains the phase 1 proposal for the peers?

A. message 7 and 8 B. message 5 and 6 C. message 3 and 4 D. message 1 and 2

Discussion 0

Correct Answer: D Vote an answer

Question 8

Click the Exhibit button.
In the exhibit, after Router A reboots, which two statements will be true about VRRP group
100? (Choose two.)

A. Router A will be the master router. B. Router B will be the master router. C. Router A will have a better priority. D. Router B will have a better priority.

Discussion 0

Correct Answer: B,C Vote an answer

Question 9

Which three security concerns can be addressed by a tunnel mode IPSec VPN secured by AH? (Choose three.)

A. outer IP header authentication B. outer IP header confidentiality C. data integrity D. data confidentiality E. data authentication

Discussion 0

Correct Answer: A,C,E Vote an answer