JN0-330 無料問題集「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES)」

（A）Source pool NAT defines a one-to-one mapping from an original source IP address to a translated source IP address and port numbers for a range of IP addresses.

（B）Source pool NAT defines a one-to-one mapping from an original source IP address to a translated source IP address for a range of IP addresses.

（C）Once a connection is established from a source, all new connections from that source are translated to the same IP address in the pool.

（D）Source NAT pools allow for different connections from the same source IP address to be translated to different IP addresses in the pool.

（A）The new sessions matching the policy might be allowed through if they match another policy. The existing sessions are dropped.

（B）The new sessions matching the policy are denied. The existing sessions, not being allowed to carry any traffic, simply timeout.

（C）The new sessions matching the policy are denied. The existing sessions continue until they are completed or their timeout is reached.

（D）The new sessions matching the policy are denied. The existing sessions are dropped.

（A）security proposals

（B）preshared key

（C）mode

（D）dead peer detection settings

（E）external interface

（A）ASBR is the router on the boundary between the two OSPF areas.

（B）ASBR is the router on the boundary between the backbone and a not-so-stubby area.

（C）ASBR is the router on the boundary between the OSPF routing domain and the other static or dynamic routing protocols.

（D）ASBR is any router that runs BGP.

（A）Telnet is not allowed because it is not considered secure.

（B）Telnet is not enabled as a host-inbound service on the zone.

（C）Telnet is not being permitted by self policy.

（D）Telnet is not being permitted by security policy.

（A）Assign logical interfaces to the zone.

（B）Define the zone as a security or functional zone.

（C）Define a default policy for the zone.

（D）Assign physical interfaces to the zone.

（A）when one of the tunnel peers has a dynamic IP address

（B）when fragmentation of the IKE packet is required between the two peers

（C）when one of the tunnel peers wants to force main mode to be used

（D）when one of the tunnel peers wants to specify a different phase 1 proposal

（A）ge-0/0/3.0

（B）se-4/0/0.0

（C）se-3/0/0.0

（D）fe-2/0/0.0

（A）data confidentiality

（B）data integrity

（C）outer IP header confidentiality

（D）data authentication

（E）outer IP header authentication

（A）The router will send a TCP reset to the host attached to interface ge-0/0/0.0.

（B）The router will silently discard the packet.

（C）The router will forward the packet out the ge-0/0/3.0 interface.

（D）The router will send a TCP reset to the host attached to interface ge-0/0/3.0.