[Free] 2018(Jan) EnsurePass Examcollection Juniper JN0-661 Dumps with VCE and PDF 41-50

Ensurepass.com : Ensure you pass the IT Exams
2018 Jan Juniper Official New Released JN0-661
100% Free Download! 100% Pass Guaranteed!
http://www.EnsurePass.com/JN0-661.html

Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC)

Question No: 41 – (Topic 1)

Which two statements regarding firewall user authentication client groups are true? (Choose two.)

  1. A client group is a list of clients associated with a group.

  2. A client group is a list of groups associated with a client.

  3. Client groups are referenced in security policy in the same manner in which individual clients are referenced.

  4. Client groups are used to simplify configuration by enabling firewall user authentication without security policy.

Answer: B,C

Question No: 42 – (Topic 1)

You must configure a SCREEN option that would protect your device from a session table flood. Which configurationmeets this requirement?

  1. [edit security screen] user@host# show

    ids-option protectFromFlood { icmp {

    ip-sweep threshold 5000;

    flood threshold 2000;

    }

    }

  2. [edit security screen] user@host# show

    ids-option protectFromFlood { tcp {

    syn-flood {

    attack-threshold 2000;

    destination-threshold 2000;

    }

    }

    }

  3. [edit security screen] user@host# show

    ids-option protectFromFlood { udp {

    flood threshold 5000;

    }

    }

  4. [edit security screen] user@host# show

ids-option protectFromFlood { limit-session {

source-ip-based 1200;

destination-ip-based 1200;

}

}

Answer: D

Question No: 43 – (Topic 1)

For which network anomaly does Junos provide a SCREEN?

  1. a telnet to port 80

  2. a TCP packet with the SYN and ACK flags set

  3. an SNMP getnext request

  4. an ICMP packet larger than 1024 bytes

Answer: D

Question No: 44 – (Topic 1)

The Junos OS blocks an HTTP request due to the category of the URL. Which form of Web filtering is being used?

  1. redirect Web filtering

  2. integrated Web filtering

  3. categorized Web filtering

  4. local Web filtering

Answer: B

Question No: 45 – (Topic 1)

Which type of Web filtering by default builds a cache of server actions associated with each URL it has checked?

  1. Websense Redirect Web filtering

  2. integrated Web filtering

  3. local Web filtering

  4. enhanced Web filtering

Answer: B

Question No: 46 – (Topic 1)

Which three methods of source NAT does the Junos OS support? (Choose three.)

  1. interface-based source NAT

  2. source NAT with address shifting

  3. source NAT using static source pool

  4. interface-based source NAT without PAT

  5. source NAT with address shifting and PAT

Answer: A,B,C

Question No: 47 – (Topic 1)

Which two statements are true regarding redundancy groups? (Choose two.)

  1. When priority settings are equal and the members participating in a cluster are initialized at the same time, the primary role for redundancy group 0 is assigned to node 0.

  2. The preempt option determines the primary and secondary roles for redundancy group 0 during a failure and recovery scenario.

  3. Redundancy group 0 manages the control plane failover between the nodes of a cluster.

  4. The primary role can be shared for redundancy group 0 when the active-active option is enabled.

Answer: A,C

Question No: 48 – (Topic 1)

Which three features are part of the branch SRX seriesUTM suite? (Choose three.)

  1. antispam

  2. antivirus

  3. IPS

  4. application firewalling

  5. Web filtering

Answer: A,B,E

Question No: 49 – (Topic 1)

Which two parameters are configured inIPsec policy? (Choose two.)

  1. mode

  2. IKE gateway

  3. security proposal

  4. Perfect Forward Secrecy

Answer: C,D

Question No: 50 – (Topic 1)

Which statement istrue regarding IPsec VPNs?

  1. There are five phases of IKE negotiation.

  2. There are two phases of IKE negotiation.

  3. IPsec VPN tunnels are not supported on SRX Series devices.

  4. IPsec VPNs require a tunnel PIC in SRX Series devices.

Answer: B

100% Ensurepass Free Download!
Download Free Demo:JN0-661 Demo PDF
100% Ensurepass Free Guaranteed!
JN0-661 Dumps

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

This entry was posted in JN0-661 Latest Exam (Jan 2018) and tagged , , , , , , , . Bookmark the permalink.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.