Study with JN0-331 Actual Test Questions

Juniper JN0-331 Exam Overview:

Juniper JN0-331 Exam Syllabus Topics:

Juniper SEC,Specialist(JNCIS-SEC) Sample Questions:

Question 1

You are creating a destination NAT rule-set.
Which two are valid for use with the from clause? (Choose two.)

A. interface
B. routing-instance
C. IP address
D. security policy

Question 2

Your task is to provision the JUNOS security platform to permit transit packets from the
Private zone to the External zone by using an IPsec VPN and log information at the time of
session close.
Which configuration meets this requirement?

A. [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}}
count {
session-close;
}}}
B. [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
log;
count session-close;
}}}}
C. [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
}
log {
session-init;
}}}
D. [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}}
log {
session-close;
}}}

Question 3

Which two statements describe the difference between JUNOS Software for security platforms and a traditional router? (Choose two.)

A. JUNOS Software for security platforms supports NAT and PAT; a traditional router does not support NAT or PAT.
B. JUNOS Software for security platforms performs route lookup for every packet; a traditional router performs route lookup only for the first packet.
C. JUNOS Software for security platforms does not forward traffic by default; a traditional router forwards traffic by default.
D. JUNOS Software for security platforms uses session-based forwarding; a traditional router uses packet-based forwarding.

Question 4

Click the Exhibit button.
[edit security]
user@host# show
ike {
policy ike-policy1 {
mode main;
proposal-set standard;
pre-shared-key ascii-text "$9$GFjm5OBEclM5QCuO1yrYgo"; ## SECRET-DATA
}
gateway remote-ike {
ike-policy ike-policy1;
address 172.19.51.170;
external-interface ge-0/0/3.0;
}}
ipsec {
policy vpn-policy1 {
proposal-set standard;
}
vpn remote-vpn {
ike {
gateway remote-ike;
ipsec-policy vpn-policy1;
}}}
Assuming you want to configure a route-based VPN, which command is required to bind the VPN
to secure tunnel interface st0.0?

A. set ike policy ike-policy1 bind-interface st0.0
B. set ipsec policy vpn-policy1 bind-interface st0.0
C. set ike gateway remote-ike bind-interface st0.0
D. set ipsec vpn remote-vpn bind-interface st0.0

Question 5

Click the Exhibit button.
profile ftp-users {
client nancy {
firewall-user {
password "$9$lJ8vLNdVYZUHKMi.PfzFcyrvX7"; ## SECRET-DATA
}}
client walter {
firewall-user {
password "$9$a1UqfTQnApB36pBREKv4aJUk.5QF"; ## SECRET-DATA
}}
session-options {
client-group ftp-group;
}}
firewall-authentication {
pass-through {
default-profile ftp-users;
ftp {
banner {
login "JUNOS Rocks!";
}}}}
Given the configuration shown in the exhibit, which configuration object would be used to
associate both Nancy and Walter with firewall user authentication within a security policy?

A. ftp-users
B. ftp-group
C. firewall-user
D. nancy and walter

Solutions: