最新のJN0-330問題集で試験を準備する

Juniper JN0-330 試験概要:

Juniper JN0-330 試験シラバストピック:

Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) 認定 JN0-330 試験問題：

1. For interfaces that are not part of redundant groups, which statement is true?

A) Interfaces that are not in a redundancy group can still forward traffic, but no redundancy is available for them.
B) All interfaces will be redundant if they reside on a system that is part of a JSRP cluster.
C) Only interfaces that have redundancy can be active in the JSRP cluster.
D) The interfaces cannot be mapped to security zones.

2. By default, which condition would cause a session to be removed from the session table?

A) The ARP table entry for the source IP timed out.
B) Security policy for the session changed.
C) No traffic matched the session during the application timeout period.
D) Route entry for the session changed.

3. Which two statements regarding asymmetric key encryption are true? (Choose two.)

A) It is commonly used to create digital certificate signatures.
B) An attacker can decrypt data if the attacker captures the key used for encryption.
C) The same key is used for encryption and decryption.
D) It uses two keys: one for encryption and a different key for decryption.

4. A network administrator wants to permit Telnet traffic initiated from the address book entry the10net in a zone called UNTRUST to the address book entry Server in a zone called TRUST. However, the administrator does not want the server to be able to initiate any type of traffic to the UNTRUST zone. NAT is not required.
Which configuration statement is correct to accomplish this task?

A) from-zone TRUST to-zone UNTRUST {
policy DenyServer {
match {
source-address Server;
destination-address any;
application any;
}
then {
permit;
}
from-zone UNTRUST to-zone TRUST {
policy AllowTelnetin {
match {
source-address the10net;
destination-address Server;
application junos-telnet;
}
then {
permit;
}
B) from-zone UNTRUST to-zone TRUST {
policy AllowTelnetin {
match {
source-address the10net;
destination-address Server;
application junos-ftp;
}
then {
permit;
}
C) from-zone TRUST to-zone UNTRUST {
policy DenyServer {
match {
source-address Server;
destination-address any;
application any;
}
then {
deny;
}
from-zone UNTRUST to-zone TRUST {
policy AllowTelnetin {
match {
source-address the10net;
destination-address Server;
application junos-telnet;
}
then {
permit;
}
D) from-zone UNTRUST to-zone TRUST {
policy DenyServer {
match {
source-address any;
destination-address any;
application any;
}
then {
deny;
}
from-zone TRUST to-zone UNTRUST {
policy AllowTelnetin {
match {
source-address the10net;
destination-address Server;
application junos-telnet;
}
then {
permit;
}

5. Which two mechanisms do link-state protocols use? (Choose two.)

A) reliable link state advertisement transmission
B) split horizon
C) poison reverse
D) SPF algorithm

質問と回答：