[Free] Download New Latest (November) Juniper JN0-533 Actual Tests 21-30

Ensurepass

QUESTION 21

A ScreenOS device detects a large number of sessions that match the same deep inspection attack object.What are two ways to configure the device? (Choose two.)

 

A.

Activate dynamic firewall policies.

 

 

 

 

B.

Close the connection and disallow further connections from the client.

C.

Close the connection and rate-limit further connections to the server.

D.

Log an alert.

 

Answer: BD

 

 

QUESTION 22

Which dynamic routing protocol does IPv6 use?

 

A.

RIP

B.

RIPng

C.

OSPFv2

D.

NHRP

 

Answer: B

 

 

QUESTION 23

You have the following BGP configuration in place to establish a session with a remote peer over your ethernet4 interface.

 

set vrouter trust-vr protocol bgp 65000

 

set vrouter trust-vr protocol bgp enable

 

set vrouter trust-vr protocol bgp neighbor remote-as 65500

 

set vrouter trust-vr protocol bgp neighbor enable

 

Which additional statement is necessary to establish the session?

 

A.

set interface protocol bgp enable

B.

set interface ethernet4 bgp enable

C.

set vrouter trust-vr protocol bgp interface ethernet4

D.

set interface ethernet4 protocol bgp

 

Answer: D

 

 

 

QUESTION 24

Which two statements are true about redundant interfaces? (Choose two.)

 

A.

You can bind two physical interfaces together to create one redundant interface.

B.

Redundant interfaces bind to a security zone; one physical interface acts as the primary interface, and the other physical interface acts as the secondary interface.

C.

A redundant interface is the accumulation of two or more physical interfaces that share the same traffic load.

D.

A redundant interface is the management interface for bridge mode.

 

Answer: AB

 

 

QUESTION 25

Click the Exhibit button.

 

clip_image002

 

What is shown in the exhibit?

 

A.

a route-based VPN

B.

a global policy

C.

a policy-based VPN

D.

a policy with counting enabled

 

Answer: C

 

 

QUESTION 26

You have been making changes on an NSRP cluster and find that the ScreenOS devices are out of sync. You want to synchronize the devices’ configurations together.

 

Which command and process are needed to accomplish this task?

 

A.

Run the command set nsrp sync global-config check-sum on the local device and then

 

 

 

 

reset the peer device.

B.

Run the command set nsrp sync global-config save on the backup device and then reset the backup device.

C.

Run the command exec nsrp sync config save on the peer device and then reset the peer device.

D.

Run the command exec nsrp sync global-config save on the backup device and then reset the backup device.

 

Answer: D

 

 

QUESTION 27

Your ScreenOS device does not have a static IP address. You want to be able to access it using its FQDN.How would you implement this task?

 

A.

Configure a domain in DNS.

B.

Configure syslog.

C.

Configure SNMP.

D.

Configure DDNS.

 

Answer: D

 

 

QUESTION 28

In a policy, which two statements are true about the no-hw-sess command? (Choose two.)

 

A.

It increases the load on the CPU.

B.

It is used for debugging.

C.

It increases the load on the ASIC card.

D.

It reduces the load on the CPU.

 

Answer: AB

 

 

QUESTION 29 – Exhibit —

 

 

 

 

ssg5-> get conf | include syn

 

set zone untrust screen syn-flood attack-threshold 625

 

set zone untrust screen syn-flood alarm-threshold 250

 

set zone untrust screen syn-flood timeout 20

 

set zone untrust screen syn-flood queue-size 1000

 

set zone untrust screen syn-flood

 

set flow syn-proxy syn-cookie

 – Exhibit —

 

A host in the untrust zone sends 1000 SYN packets in a single second to a host in your trust zone destined for port 80.

 

Referring to the exhibit, which statement describes the behavior of the ScreenOS device?

 

A.

It will maintain this state for all 1000 connection attempts.

B.

It will begin to drop the SYN packets.

C.

It will block further connection attempts from this host for 20 seconds.

D.

It will reply with SYN-ACK packets.

 

Answer: D

 

 

QUESTION 30

What is the initial default username and password for all ScreenOS devices?

 

A.

administrator/password

B.

root/password

C.

netscreen/netscreen

D.

admin/netscreen1

 

Answer: D

 

Free VCE & PDF File for Juniper JN0-533 Actual Tests

Instant Access to Free VCE Files: CompTIA | VMware | SAP …
Instant Access to Free PDF Files: CompTIA | VMware | SAP …

This entry was posted in JN0-533 Actual Tests (November) and tagged , , , , , , . Bookmark the permalink.