This page was exported from Braindump2go Free Latest Microsoft Hot Exam Dumps In PDF &amp; VCE Free Download [ https://www.symantecdumps.com ]

Export date:Tue Jul 16 13:38:40 2024 / +0000 GMT

___________________________________________________


Title: 2014 Latest Juniper JN0-332 Exam Dump Free Download!

---------------------------------------------------


QUESTION 1 Which configuration keyword ensures that all in-progress sessions are re-evaluated upon committing a security policy change? A.&nbsp;&nbsp;&nbsp; policy-rematch B.&nbsp;&nbsp;&nbsp; policy-evaluate C.&nbsp;&nbsp;&nbsp; rematch-policy D.&nbsp;&nbsp;&nbsp; evaluate-policy Answer: AQUESTION 2 Click the Exhibit button. You need to alter the security policy shown in the exhibit to send matching traffic to an IPsec VPN tunnel. Which command causes traffic to be sent through an IPsec VPN named remote-vpn? &nbsp; A.&nbsp;&nbsp;&nbsp; [edit security policies from-zone trust to-zone untrust] user@host# set policy tunnel-traffic then tunnel remote-vpn B.&nbsp;&nbsp;&nbsp; [edit security policies from-zone trust to-zone untrust] user@host# set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn C.&nbsp;&nbsp;&nbsp; [edit security policies from-zone trust to-zone untrust] user@host# set policy tunnel-traffic then permit ipsec-vpn remote-vpn D.&nbsp;&nbsp;&nbsp; [edit security policies from-zone trust to-zone untrust] user@host# set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn Answer: D QUESTION 3 Which three security concerns can be addressed by a tunnel mode IPsec VPN secured by AH? (Choose three.) A.&nbsp;&nbsp;&nbsp; data integrity B.&nbsp;&nbsp;&nbsp; data confidentiality C.&nbsp;&nbsp;&nbsp; data authentication D.&nbsp;&nbsp;&nbsp; outer IP header confidentiality E.&nbsp;&nbsp;&nbsp; outer IP header authentication Answer: ACE QUESTION 4 You must configure a SCREEN option that would protect your router from a session table flood.Which configuration meets this requirement? A.&nbsp;&nbsp;&nbsp; [edit security screen] user@host# show ids-option protectFromFlood { icmp { ip-sweep threshold 5000; flood threshold 2000; } } B.&nbsp;&nbsp;&nbsp; [edit security screen] user@host# show ids-option protectFromFlood { tcp { syn-flood { attack-threshold 2000; destination-threshold 2000; } } } C.&nbsp;&nbsp;&nbsp; [edit security screen] user@host# show ids-option protectFromFlood { udp { flood threshold 5000; } } D.&nbsp;&nbsp;&nbsp; [edit security screen] user@host# show ids-option protectFromFlood { limit-session { source-ip-based 1200; destination-ip-based 1200; } } Answer: D QUESTION 5 Which type of Web filtering by default builds a cache of server actions associated with each URL it has checked? A.&nbsp;&nbsp;&nbsp; Websense Redirect Web filtering B.&nbsp;&nbsp;&nbsp; integrated Web filtering C.&nbsp;&nbsp;&nbsp; local Web filtering D.&nbsp;&nbsp;&nbsp; enhanced Web filtering Answer: B QUESTION 6 Which security or functional zone name has special significance to the Junos OS? A.&nbsp;&nbsp;&nbsp; self B.&nbsp;&nbsp;&nbsp; trust C.&nbsp;&nbsp;&nbsp; untrust D.&nbsp;&nbsp;&nbsp; junos-global Answer: D QUESTION 7 Which command do you use to display the status of an antivirus database update? A.&nbsp;&nbsp;&nbsp; show security utm anti-virus status B.&nbsp;&nbsp;&nbsp; show security anti-virus database status C.&nbsp;&nbsp;&nbsp; show security utm anti-virus database D.&nbsp;&nbsp;&nbsp; show security utm anti-virus update Answer: A QUESTION 8 Which statement contains the correct parameters for a route-based IPsec VPN? A.&nbsp;&nbsp;&nbsp; [edit security ipsec] user@host# show proposal ike1-proposal { protocol esp; authentication-algorithm hmac-md5-96; encryption-algorithm 3des-cbc; lifetime-seconds 3200; } policy ipsec1-policy { perfect-forward-secrecy { keys group2; } proposals ike1-proposal; } vpn VpnTunnel { interface ge-0/0/1.0; ike { gateway ike1-gateway; ipsec-policy ipsec1-policy; } establish-tunnels immediately; } B.&nbsp;&nbsp;&nbsp; [edit security ipsec] user@host# show proposal ike1-proposal { protocol esp; authentication-algorithm hmac-md5-96; encryption-algorithm 3des-cbc; lifetime-seconds 3200; } policy ipsec1-policy { perfect-forward-secrecy { keys group2; } proposals ike1-proposal; } vpn VpnTunnel { interface st0.0; ike { gateway ike1-gateway; ipsec-policy ipsec1-policy; } establish-tunnels immediately; } C.&nbsp;&nbsp;&nbsp; [edit security ipsec] user@host# show proposal ike1-proposal { protocol esp; authentication-algorithm hmac-md5-96; encryption-algorithm 3des-cbc; lifetime-seconds 3200; } policy ipsec1-policy { perfect-forward-secrecy { keys group2; } proposals ike1-proposal; } vpn VpnTunnel { bind-interface ge-0/0/1.0; ike { gateway ike1-gateway; ipsec-policy ipsec1-policy; } establish-tunnels immediately; } D.&nbsp;&nbsp;&nbsp; [edit security ipsec] user@host# show proposal ike1-proposal { protocol esp; authentication-algorithm hmac-md5-96; encryption-algorithm 3des-cbc; lifetime-seconds 3200; }policy ipsec1-policy { perfect-forward-secrecy { keys group2; } proposals ike1-proposal; } vpn VpnTunnel { bind-interface st0.0; ike { gateway ike1-gateway; ipsec-policy ipsec1-policy; } establish-tunnels immediately; } Answer: D QUESTION 9 Which zone is system-defined? A.&nbsp;&nbsp;&nbsp; security B.&nbsp;&nbsp;&nbsp; functional C.&nbsp;&nbsp;&nbsp; junos-global D.&nbsp;&nbsp;&nbsp; management Answer: C QUESTION 10 You want to allow your device to establish OSPF adjacencies with a neighboring device connected to interface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone. Under which configuration hierarchy must you permit OSPF traffic? A.&nbsp;&nbsp;&nbsp; [edit security policies from-zone HR to-zone HR] B.&nbsp;&nbsp;&nbsp; [edit security zones functional-zone management protocols] C.&nbsp;&nbsp;&nbsp; [edit security zones protocol-zone HR host-inbound-traffic] D.&nbsp;&nbsp;&nbsp; [edit security zones security-zone HR host-inbound-traffic protocols]  Answer: D QUESTION 11 Click the Exhibit button. Your IKE SAs are up, but the IPsec SAs are not up.Referring to the exhibit, what is the problem? &nbsp; A.&nbsp;&nbsp;&nbsp; One or more of the phase 2 proposals such as authentication algorithm, encryption algorithm do not match. B.&nbsp;&nbsp;&nbsp; The tunnel interface is down. C.&nbsp;&nbsp;&nbsp; The proxy IDs do not match. D.&nbsp;&nbsp;&nbsp; The IKE proposals do not match the IPsec proposals. Answer: C QUESTION 12 Which three statements are true regarding IDP? (Choose three.) A.&nbsp;&nbsp;&nbsp; IDP cannot be used in conjunction with other Junos security features such as SCREEN options, zones, and security policy. B.&nbsp;&nbsp;&nbsp; IDP inspects traffic up to the Application Layer. C.&nbsp;&nbsp;&nbsp; IDP searches the data stream for specific attack patterns. D.&nbsp;&nbsp;&nbsp; IDP inspects traffic up to the Presentation Layer. E.&nbsp;&nbsp;&nbsp; IDP can drop packets, close sessions, prevent future sessions, and log attacks for review by network administrators when an attack is detected. Answer: BCE QUESTION 13 Referring to the exhibit, you see that Node 0 is currently primary for redundancy Group 0. You have not yet configured any chassis cluster parameters. You want to ensure that Node 1 is always the primary node for this redundancy group if both nodes reboot at same time. Which configuration step would accomplish this task? user@host&gt;show chassis cluster status cluster ID: 1 Node&nbsp;&nbsp;&nbsp; Priority&nbsp;&nbsp;&nbsp; Status&nbsp;&nbsp;&nbsp; Preempt&nbsp;&nbsp;&nbsp; Manual&nbsp;&nbsp;&nbsp;&nbsp; Failover Redundancy group:&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp; ,Failover count: 1 Node0&nbsp;&nbsp;&nbsp; 1&nbsp;&nbsp;&nbsp; primary&nbsp;&nbsp;&nbsp;&nbsp; no&nbsp;&nbsp;&nbsp; no Node1&nbsp;&nbsp;&nbsp; 1&nbsp;&nbsp;&nbsp; secondary&nbsp;&nbsp;&nbsp; no&nbsp;&nbsp;&nbsp; no A.&nbsp;&nbsp;&nbsp; user@host# set chassis cluster redundancy-group 0 node 1 priority 1 B.&nbsp;&nbsp;&nbsp; user@host# set chassis cluster redundancy-group 0 node 1 C.&nbsp;&nbsp;&nbsp; user@host# set chassis cluster redundancy-group 0 preempt D.&nbsp;&nbsp;&nbsp; user@host# set chassis cluster redundancy-group 0 node 0 priority 255 E.&nbsp;&nbsp;&nbsp; user@host# set chassis cluster redundancy-group 0 node 1 priority 254 Answer: E QUESTION 14 Referring to the exhibit, you have just committed the UTM antivirus configuration. You notice that the SRX Series device shows that Kaspersky scanning is being used instead of express scanning. What must you do to resolve this problem? A.&nbsp;&nbsp;&nbsp; You must configure the antivirus type to use express scanning B.&nbsp;&nbsp;&nbsp; You must configure the antivirus type to disable Kaspersky C.&nbsp;&nbsp;&nbsp; You must update the antivirus signatures D.&nbsp;&nbsp;&nbsp; You must wait until the next pattern update Answer: A QUESTION 15 Which statement is true about a logical interface? A.&nbsp;&nbsp;&nbsp; A logical interface can belong to multiple zones B.&nbsp;&nbsp;&nbsp; A logical interface can belong to multiple routing instances C.&nbsp;&nbsp;&nbsp; A logical interface can belong to only one routing instance D.&nbsp;&nbsp;&nbsp; All logical interfaces in a routing instance must belong to a single zone Answer: C Passing your Juniper JN0-332 Exam by using the latest Juniper JN0-332 Exam Dump Full Version: http://www.braindump2go.com/jn0-332.html

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2014-08-01 02:48:11

Post date GMT: 2014-08-01 02:48:11

Post modified date: 2014-08-01 02:48:11

Post modified date GMT: 2014-08-01 02:48:11



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com