JN0-330-Enhanced Services, Specialist(JNCIS-ES)

Question 1

Which two statements about the Diffie-Hellman (DH) key exchange process are correct?
(Choose two.)

A. In the DH key exchange process, the private key values are exchanged across the network.

B. In the DH key exchange process, each router creates a unique public and private keys that are mathematically related by the DH algorithm.

C. In the DH key exchange process, the public key values are exchanged across the network.

D. In the DH key exchange process, each router creates a common public and a unique private key that are mathematically related by the DH algorithm.

Correct Answer: B,C

Question 2

Two VPN peers are negotiating IKE phase 1 using main mode. Which message pair in the negotiation contains the phase 1 proposal for the peers?

A. message 5 and 6

B. message 3 and 4

C. message 1 and 2

D. message 7 and 8

Correct Answer: C

Question 3

Interface ge-0/0/0.0 of your router is attached to the Internet and is configured with an IP address and network mask of 71.33.252.19/24. A host with IP address 10.20.20.1 is running an SSH service on TCP port 2222. This host is attached to the ge-0/0/3.0 interface of your router. You must use interface-based static NAT to make the SSH service on the host reachable from the Internet.
On which IP address and TCP port can Internet hosts reach the SSH service?

A. IP address 10.20.20.1 and TCP port 2222

B. IP address 71.33.252.19 and TCP port 22

C. IP address 71.33.252.20 and TCP port 2222

D. IP address 71.33.251.1 and TCP port 22

Correct Answer: C

Question 4

You are configuring a DHCP pool at the [edit system services DHCP pool 10.3.3.0/24] hierarchy. Which configuration statement will cause the DHCP server to tell the clients to use 10.3.3.1 as their default gateway?

A. gateway {
10.3.3.1;
}

B. next-router {
10.3.3.1;
}

C. default-gateway {
10.3.3.1;
}

D. router {
10.3.3.1;
}

Correct Answer: D

Question 5

What is the purpose of an address book?

A. It defines hosts in a zone so they can be referenced by policies.

B. It holds statistics about traffic to and from particular hosts.

C. It maps hostnames to IP addresses to serve as a backup to DNS resolution.

D. It holds security policies for particular hosts.

Correct Answer: A

Question 6

Host A opens a Telnet connection to Host B.
Host A then opens another Telnet connection to Host B.
These connections are the only communication between Host A and Host B.
The security policy configuration permits both connections.
How many flows exist between Host A and Host B?

A. 2

B. 1

C. 3

D. 4

Correct Answer: D

Question 7

Which statement is true about interface-based static NAT?

A. It requires you to configure address entries in the junos-global zone.

B. It requires you to configure address entries in the junos-nat zone.

C. The IP addresses being translated must be in the same subnet as the incoming interface.

D. It also supports PAT.

Correct Answer: C

Question 8

Click the Exhibit button.
Based on the exhibit, client PC 192.168.10.10 cannot ping 1.1.1.2.
Which is a potential cause for this problem?

A. The trust zone does not have ping enabled as host-inbound-traffic service.

B. No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.

C. The untrust zone does not have a management policy configured.

D. The security policy from the trust zone to the untrust zone does not permit ping.

Correct Answer: D

Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) - JN0-330 Exam Practice Test

Latest Update

Useful Links

Contact Us