JN0-330無料問題集「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES)」

質問 1

Which two statements about OSPF are correct? (Choose two.)

（A）The OSPF backbone area contains Type 5 LSAs, while not-so-stubby areas contain Type 7 LSAs.

（B）The OSPF backbone area contains all routes, while other OSPF areas contain only summary routes.

（C）OSPF stub areas do not have any Type 5 LSAs, while totally stubby areas do not have any Type 5, 3, and 4 LSAs.

（D）OSPF not-so-stubby areas do not have any Type 5 LSAs, while the backbone area contains Type 7 LSAs.

正解：A、C 解答を投票する

質問 2

Which two statements about the Diffie-Hellman (DH) key exchange process are correct?
(Choose two.)

（A）In the DH key exchange process, each router creates a common public and a unique private key that are mathematically related by the DH algorithm.

（B）In the DH key exchange process, the private key values are exchanged across the network.

（C）In the DH key exchange process, the public key values are exchanged across the network.

（D）In the DH key exchange process, each router creates a unique public and private keys that are mathematically related by the DH algorithm.

正解：C、D 解答を投票する

質問 3

What is a redundancy group?

（A）a set of devices that participate in a JSRP cluster

（B）a set of VRRP neighbors that fail over as a group

（C）a set of redundant interfaces that fail over as a group

（D）a set of JSRP clusters that fail over as a group

正解：C 解答を投票する

質問 4

What are three main phases of an attack? (Choose three.)

（A）port scanning

（B）propagation

（C）reconnaissance

（D）DoS

（E）exploit

正解：B、C、E 解答を投票する

質問 5

Click the Exhibit button.
A flow of HTTP traffic needs to go from HOSTA to HOSTB through a router. Assume that traffic will initiate from HOSTA and that HOSTA is in zone trust and HOSTB is in zone untrust.
What will happen to the traffic given the configuration in the exhibit?

（A）The traffic will be dropped as no policy match will be found.

（B）The traffic will be permitted by policy AllowHTTP3.

（C）The traffic will be permitted by policy AllowHTTP.

（D）The traffic will be permitted by policy AllowHTTP2.

正解：B 解答を投票する

質問 6

A network administrator wants to permit Telnet traffic initiated from the address book entry the10net in a zone called UNTRUST to the address book entry Server in a zone called TRUST. However, the administrator does not want the server to be able to initiate any type of traffic to the UNTRUST zone. NAT is not required.
Which configuration statement is correct to accomplish this task?

（A）from-zone TRUST to-zone UNTRUST {
policy DenyServer {
match {
source-address Server;
destination-address any;
application any;
}
then {
permit;
}
from-zone UNTRUST to-zone TRUST {
policy AllowTelnetin {
match {
source-address the10net;
destination-address Server;
application junos-telnet;
}
then {
permit;
}

（B）from-zone TRUST to-zone UNTRUST {
policy DenyServer {
match {
source-address Server;
destination-address any;
application any;
}
then {
deny;
}
from-zone UNTRUST to-zone TRUST {
policy AllowTelnetin {
match {
source-address the10net;
destination-address Server;
application junos-telnet;
}
then {
permit;
}

（C）from-zone UNTRUST to-zone TRUST {
policy DenyServer {
match {
source-address any;
destination-address any;
application any;
}
then {
deny;
}
from-zone TRUST to-zone UNTRUST {
policy AllowTelnetin {
match {
source-address the10net;
destination-address Server;
application junos-telnet;
}
then {
permit;
}

（D）from-zone UNTRUST to-zone TRUST {
policy AllowTelnetin {
match {
source-address the10net;
destination-address Server;
application junos-ftp;
}
then {
permit;
}

正解：B 解答を投票する

質問 7

Your task is to provision the router running JUNOS software with enhanced services to permit transit packets from the Private zone to the External zone by using an IPSec VPN and log information at the time of session close.
Which configuration meets this requirement?

（A）[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
log {
session-init;
}

（B）[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
log;
count session-close;
}

（C）[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
count {
session-close;
}

（D）[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
log {
session-close;
}

正解：D 解答を投票する

質問 8

An attacker sends a low rate of TCP SYN segments to hosts, hoping that at least one port replies. Which type of an attack is described in the scenario?

（A）port scanning

（B）DoS

（C）SYN flood

（D）IP address sweep

正解：A 解答を投票する

質問 9

Click the Exhibit button.
In the exhibit, what is the function of these configuration statements?

（A）You can apply this configuration in the JSRP cluster so that configuration becomes easier.

（B）This section is where you define all JSRP clustering configuration.

（C）This configuration is required for members of a JSRP cluster to talk to each other.

（D）This section is where unique node configuration is applied, which is not replicated across systems.

正解：D 解答を投票する

質問 10

Which three security concerns can be addressed by a tunnel mode IPSec VPN secured by AH? (Choose three.)

（A）data confidentiality

（B）data integrity

（C）outer IP header confidentiality

（D）data authentication

（E）outer IP header authentication

正解：B、D、E 解答を投票する

JN0-330 無料問題集「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES)」

弊社を連絡する

関連リンク

トップ試験