[Free] Download New Latest (November) Juniper JN0-332 Actual Tests Topic 5, Volume E part 06

Ensurepass

QUESTION 451  (Topic 5)

 

Click the Exhibit button.

 

 

clip_image002

 

Referring to the exhibit, assume the node0 impairment was caused by a reth interface going down.

 

When the interface comes back online, which statement would be correct?

 

A.

If node0 is configured with priority 200, it will take over as redundancy group 1 primary.

B.

If node0 is configured with priority 1. It will take over as redundancy group 1 primary.

C.

Node0 will take over as primary for redundancy group 1 reg
ardless of node’1s priority.

D.

Node1 will stay primary for redundancy group 1 regardless of node0’s priority.

 

Answer: D

 

 

QUESTION 452  (Topic 5)

 

For a route-based VPN, which statement is true?

 

A.

host-inbound-traffic system services ike must be enabled on the st0.x interface

B.

host-inbound-traffic system services ike must be enabled on both the st0.x interface and the logical interface on which ike terminates

C.

host-inbound-traffic system services ike must be enabled
on the logical interface on which ike terminates.

D.

host-inbound-traffic system services ike is not mandatory for route based VPNs.

 

Answer: C

 

 

QUESTION 453  (Topic 5)

 

Click the Exhibit button.

 

 

 

 

 

clip_image004

 

The phase 1 tunnel of a site-to-site VPN is not establishing as shown in the exhibit. What would you do to resolve the problem on your SRX Series device?

 

A.

Change the remote side of the VPN to use the correct peering address

B.

Change the phase 1 mode from aggressive mode to main mode.

C.

Change the preshared key on both sides to matching values

D.

Change the phase 1 proposals to match on both sides of the IPsec VPN

 

Answer: C

 

 

QUESTION 454  (Topic 5)

 

You want to configure one-to-one static mapping of IP addresses using an address pool without using PAT on an SRX Series device. Which source NAT option would you use?

 

A.

Interface-based source NAT

B.

Proxy ARP

C.

Address shifting

D.

Overflow pool

 

Answer: C

 

 

 

 

 

QUESTION 455  (Topic 5)

 

You are creating a security policy on an SRX Series device with a permit action.

 

What are two possible actions the device also performs on matching traffic? (Choose two)

 

A.

Send the traffic to a routing-instance.

B.

Send the traffic to a logical system

C.

Send the traffic to an IPSec tunnel

D.

Send the traffic for IDP evaluation

 

Answer: AC

 

 

QUESTION 456  (Topic 5)

 

Click the Exhibit button.

 

 

 

 

 

clip_image006

 

Your team is unable to open more than four HTTP sessions to a traffic monitoring tool hosted on the Internet accessed through an SRX Series device.

 

Referring to the exhibit, what would you do to resolve the problem?

 

A.

Increase the TCP SYN flood source threshold

B.

Increase the destination-based session limit

C.

Increase the TCP SYN flood destination threshold

D.

Disable the IP teardrop screening option

 

 

 

 

 

Answer: B

 

 

QUESTION 457  (Topic 5)

 

Which statement is true about a logical interface?

 

A.

A logical interface can belong to multiple zones

B.

A logical interface can belong to multiple routing instances

C.

A logical interface can belong to only one routing instance

D.

All logical interfaces in a routing instance must belong to a single zone

 

Answer: C

 

 

QUESTION 458  (Topic 5)

 

You want to configure a security policy that allows traffic to a particular host.

 

Which step must you perform before committing a configuration with the policy?

 

A.

Define a static route to the host

B.

Ensure that the router can ping the host

C.

Define an address book entry for the host

D.

Ensure that the router has an ARP entry for the host

 

Answer: C

 

 

QUESTION 459  (Topic 5)

 

Click the Exhibit button.

 

 

 

 

 

 

 

 

 

clip_image008

 

You are setting up a chassis cluster with two SRX240 devices with node0 as primary and node1 as secondary. You notice each node shows the other node as lost.

 

Referring to the exhibit, which statement is correct?

 

A.

You must have redundancy-group 0 applied to a redundant interface for node0 and node1.

B.

You must add preempt to the redundancy-group 0 configuration for node0 and node1.

C.

You must remove the disable configuration from interface ge-0/GY4 for node0 and node1.

D.

You must have the same cluster ID for node0 and node1.

 

Answer: D

 

 

QUESTION 460  (Topic 5)

 

 

 

 

Click the Exhibit button.

 

clip_image010

 

Referring to the exhibit, what is the post-translated address on the SRX Series device?

 

A.

1.1.1.122

B.

10.200.101.12

C.

10.200.101.11

D.

1.1.1.1

 

Answer: A

 

Free VCE & PDF File for Juniper JN0-332 Actual Tests

Instant Access to Free VCE Files: CompTIA | VMware | SAP …
Instant Access to Free PDF Files: CompTIA | VMware | SAP …

This entry was posted in JN0-332 Actual Tests (November) and tagged , , , , , , . Bookmark the permalink.