JN0-330 無料問題集「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES)」

（A）Routers choose the best path for a destination based on the interface on which they received the link state advertisement with the lowest cost.

（B）All routers in a given area or level forward link state advertisements between interfaces in the same area or level, adding their metric to the link state advertisement's cost information when they forward it.

（C）Routers choose a best path for a destination based on the SPF algorithm.

（D）All routers in a given area or level build a consistent database describing the network's topology.

（A）The same key is used for encryption and decryption.

（B）It uses two keys: one for encryption and a different key for decryption.

（C）An attacker can decrypt data if the attacker captures the key used for encryption.

（D）It is commonly used to create digital certificate signatures.

（A）show interfaces vrrp ge-0/0/1.0 group 100

（B）show vrrp

（C）show interfaces ge-0/0/1.0 vrrp group 100

（D）show vrrp group 100

（A）The security policy from the trust zone to the untrust zone does not permit ping.

（B）The untrust zone does not have a management policy configured.

（C）No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.

（D）The trust zone does not have ping enabled as host-inbound-traffic service.

（A）The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between 7:00 am and 6:00 pm, and Thursdays between 7:00 am and 6:00 pm.

（B）The traffic is permitted through the myTunnel IPSec tunnel all day on Mondays, Wednesdays between 6:01 pm and 6:59 am, and Thursdays between 6:01 pm and 6:59 am.

（C）The traffic is permitted through the myTunnel IPSec tunnel daily, with the exception of Mondays.

（D）The traffic is permitted through the myTunnel IPSec tunnel only on Tuesdays.

（A）[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
log {
session-init;
}

（B）[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
log;
count session-close;
}

（C）[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
count {
session-close;
}

（D）[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
log {
session-close;
}

（A）NAT

（B）SCREEN options

（C）OSPF

（D）SNMP

（A）[edit routing-options static]

（B）[edit protocols static]

（C）[edit routes static]

（D）[edit routing-options routes]

（A）static, local, OSPF internal, RIP

（B）direct, static, BGP, OSPF external

（C）direct, static, OSPF internal, RIP

（D）local, static, RIP, OSPF internal

（A）In the DH key exchange process, each router creates a common public and a unique private key that are mathematically related by the DH algorithm.

（B）In the DH key exchange process, the private key values are exchanged across the network.

（C）In the DH key exchange process, the public key values are exchanged across the network.

（D）In the DH key exchange process, each router creates a unique public and private keys that are mathematically related by the DH algorithm.