Juniper Security, Specialist (JNCIS-SEC) - JN0-333 Exam Practice Test
Question 1
Click the Exhibit button.
You are monitoring traffic, on your SRX300 that was configured using the factory default security parameters.
You notice that the SRX300 is not blocking traffic between Host A and Host B as expected.
Referring to the exhibit, what is causing this issue?
You are monitoring traffic, on your SRX300 that was configured using the factory default security parameters.
You notice that the SRX300 is not blocking traffic between Host A and Host B as expected.
Referring to the exhibit, what is causing this issue?
Correct Answer: B
Question 2
What is the function of redundancy group 0 in a chassis cluster?
Correct Answer: D
Question 3
Click the Exhibit button.
You have configured NAT on your network so that Host A can communicate with Server B.
You want to ensure that Host C can initiate communication with Host A using Host A's reflexive address.
Referring to the exhibit, which parameter should you configure on the SRX Series device to satisfy this requirement?
You have configured NAT on your network so that Host A can communicate with Server B.
You want to ensure that Host C can initiate communication with Host A using Host A's reflexive address.
Referring to the exhibit, which parameter should you configure on the SRX Series device to satisfy this requirement?
Correct Answer: D
Question 4
What are the maximum number of redundancy groups that would be used on a chassis cluster?
Correct Answer: D
Question 5
You want to protect your SRX Series device from the ping-of-death attack coming from the untrust security zone.
How would you accomplish this task?
How would you accomplish this task?
Correct Answer: A
Question 6
Click the Exhibit button.
You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172.25.11.0/24 subnet to the Internet. You create a policy named permit - http between the trust and untrust zones that permits HTTP traffic.
When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.
Which two actions would correct the error? (Choose two.)
You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172.25.11.0/24 subnet to the Internet. You create a policy named permit - http between the trust and untrust zones that permits HTTP traffic.
When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.
Which two actions would correct the error? (Choose two.)
Correct Answer: B,C
Question 7
Which three elements does AH provide in an IPsec implementation? (Choose three.)
Correct Answer: A,C,E
Question 8
Which feature is used when you want to permit traffic on an SRX Series device only at specific times?
Correct Answer: C
