[Free] Download New Latest (November) Juniper JN0-532 Actual Tests 1-10

Ensurepass

QUESTION 1

What is the default number of equal-cost routes that are used by a ScreenOS device?

 

A.

1

B.

2

C.

3

D.

4

 

Answer: A

 

 

QUESTION 2

You enter the following commands:

 

Snoopfilter ip dst-ip 1.1.1.10

Snoopfilter ip src-ip 2.1.1.10

 

What is the net result of these settings?

 

A.

Only packets with both a dst-ip of 1.1.1.10 and a src-ip of 2.1.1.10 will be captured

B.

Packets that have either a dst-ip of 1.1.1.10 or packets with a src-ip of 2.1.1.10 will be captured

C.

The second command will be ignored since a second filter cannot be added until the first one has been deleted

D.

The second command you entered will overwrite the first command you entered so you will only capture traffic with a src-ip of 2.1.1.10

 

Answer: B

 

 

QUESTION 3

You need to investigate some physical layer problems.

 

Which command will provide you with information that you can use to analyze these type of problems?

 

A.

get counter interface e0/0

B.

get counter statistics e0/0

 

 

 

 

C.

get counter flow interface e0/0

D.

get counter statistics interface e0/0

 

Answer: D

 

 

QUESTION 4

When deploying AutoConnect-VPNs, which three of the following configuration elements must be configured on the hub device? (Choose three)

 

A.

AC-VPN Dynamic VPN

B.

AC-VPN Gateway profile

C.

NHRP configured as NHS

D.

NHRP configured as NHC

E.

NHRP enabled on tunnel interface

 

Answer: BCE

 

 

QUESTION 5

Click the Exhibit button.

 

clip_image002

 

Given the routing table in the exhibit, which interface will be used to reach the host at

Q1

1.20.1?

 

 

 

 

 

A.

tunnel.1

B.

tunnel.21

C.

ethernet0/2

D.

ethernet0/4

 

Answer: D

 

 

QUESTION 6

Click the Exhibit button.

 

clip_image004

 

After the commands shown in the exhibit were entered, users began reporting network performance problems.

 

Which command would resolve this problem?

 

A.

undebug all

B.

unset filter

C.

set debug optimize 8192kb

D.

debug flow src-ip 10.35.29.1

 

Answer: A

 

 

QUESTION 7

A VPN tunnel uses certificates for site-to-site authentication. Phase 1 is failing when the receiving device attempts to validate the received certificate.

 

 

 

 

What would be causing this problem?

 

A.

The device certificate has been revoked.

B.

The CA certificate does not include the device certificate.

C.

The device certificate has a CDP extension, making it invalid.

D.

The device certificate was generated before the CRL was downloaded, so it cannot be validated.

 

Answer: A

 

 

QUESTION 8

Which two components are required to implement ScreenOS deep inspection? (Choose two.)

 

A.

policy statements

B.

signature database

C.

IDP action statement

D.

service book group entries

 

Answer: AB

 

 

QUESTION 9

You have configured NSRP Active/Passive using the default vsd-group. You are using OSPF to learn routes from adjacent network devices.

 

Which configuration is required to ensure the dynamic routes are available on both the devices?

 

A.

Dynamic routes are RTO objects; no additional configuration is required.

B.

You have to unset nsrp vsd-group id 0 and configure OSPF on the local interfaces of the master device only.

C.

You have to configure OSPF on the VSI interfaces. All dynamic routes learned on the VSI will be synced to the backup.

D.

You have to unset nsrp vsd-group id 0 and set nsrp vsd-group id 1 for the VSI interface, then configure OSPF on the local interfaces on both the devices.

 

Answer: D

 

 

 

 

 

QUESTION 10

Which ScreenOS configuration element will influence the application of SCREENs to traffic passing through the device?

 

A.

policy

B.

zones

C.

routing

D.

interfaces

 

Answer: B

 

Free VCE & PDF File for Juniper JN0-532 Actual Tests

Instant Access to Free VCE Files: CompTIA | VMware | SAP …
Instant Access to Free PDF Files: CompTIA | VMware | SAP …

This entry was posted in JN0-532 Actual Tests (November) and tagged , , , , , , . Bookmark the permalink.