Juniper Security, Specialist (JNCIS-SEC) - JN0-333 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

What is the function of redundancy group 0 in a chassis cluster?

A. Redundancy group 0 identifies the node controlling the cluster management interface IP addresses. B. The primary node for redundancy group 0 identifies the first member node in a chassis cluster. C. The primary node for redundancy group 0 determines the interface naming for all chassis cluster nodes. D. The node on which redundancy group 0 is primary determines which Routing Engine is active in the cluster.

Discussion 0

Correct Answer: D Vote an answer

Question 2

You want to support reth LAG interfaces on a chassis cluster.
Which setting must be enabled on the interconnecting switch to accomplish this task?

A. LLDP B. swfab C. RSTP D. 802.3ad

Discussion 0

Correct Answer: D Vote an answer

Question 3

What are three valid virtual interface types for a vSRX? (Choose three.)

A. fxp0 B. eth0 C. VMXNET 3 D. SR-IOV E. virtio

Discussion 0

Correct Answer: A,C,D Vote an answer

Question 4

Click the Exhibit button. Referring to the exhibit, what will happen if client 172.16.128.50 tries to connect to destination 192.168.150.3 using HTTP?

A. The client will be permitted by policy p1. B. The client will be denied by policy p3. C. The client will be denied by policy p2. D. The client will be permitted by the global policy.

Discussion 0

Correct Answer: D Vote an answer

Question 5

Which three elements does AH provide in an IPsec implementation? (Choose three.)

A. authentication B. replay attack protection C. availability D. integrity E. confidentiality

Discussion 0

Correct Answer: A,B,D Vote an answer

Question 6

Clients at a remote office are accessing a website that is against your company Internet policy. You change the action of the security policy that controls HTTP access from permit to deny on the remote office SRX Series device. After committing the policy change, you notice that new users cannot access the website but users that have existing sessions on the device still have access. You want to block all user sessions immediately.
Which change would you make on the SRX Series device to accomplish this task?

A. Add the set security flow tcp-session rst-invalidate-session option to the configuration and commit the change. B. Add the security flow tcp-session strict-syn-check option to the configuration and commit the change. C. Issue the commit full command from the top of the configuration hierarchy. D. Add the set security policies policy-rematch parameter to the configuration and commit the change.

Discussion 0

Correct Answer: D Vote an answer

Question 7

Which host-inbound-traffic security zone parameter would allow access to the REST API configured to listen on custom TCP port 5080?

A. any-service B. http C. all D. xnm-clear-text

Discussion 0

Correct Answer: A Vote an answer

Question 8

Click the Exhibit button.

You notice that your SRX Series device is not blocking HTTP traffic as expected.
Referring to the exhibit, what should you do to solve the problem?

A. Reboot the SRX Series device. B. Configure the SRX Series device to operate in packet-based mode. C. Move the deny-http policy to the bottom of the policy list. D. Commit the configuration.

Discussion 0

Correct Answer: A Vote an answer