Downloadable of JN0-332 download materials and preparation labs for Juniper certification for consumer, Real Success Guaranteed with Updated JN0-332 pdf dumps vce Materials. 100% PASS uniper Networks Certified Internet Specialist, SEC (JNCIS-SEC) exam Today!

2021 Oct JN0-332 brain dumps

Q1. Referring to the exhibit, which two statements are correct? (choose two) 

[edit security zones] user@host#show security-zone untrust { 

screen untrust-screen host-inbound-traffic { system-services { ssh; ping; } } Interfaces { ge-0/0/1.0 ge-0/0/3.0{ host-inboun d-traffic{ protocols { ospf; } } } 

A. An OSPF adjacency can e established on interface ge-0/0/3. 

B. AN OSPF adjacency can be established on both interfaces 

C. SSH can connect on interface ge-0/0/1 

D. Ping is not allowed on either interface 

Answer: AC 


Q2. Which two statements about static NAT are true? (Choose two.) 

A. Static NAT can only be used with destination NAT. 

B. Static NAT rules take precedence over overlapping dynamic NAT rules. 

C. NAT rules take precedence over overlapping static NAT rules. 

D. A reverse mapping is automatically created. 

Answer: BD 


Q3. Which two statements are true about pool-based source NAT? (Choose two.) 

A. PAT is not supported. 

B. PAT is enabled by default. 

C. It supports the address-persistent configuration option. 

D. It supports the junos-global configuration option. 

Answer: BC 


Q4. On which component is the control plane implemented? 

A. IOC 

B. PIM 

C. RE 

D. SPC 

Answer: C 


Q5. Regarding content filtering, what are two pattern lists that can be configured in the Junos OS? (Choose two.) 

A. protocol list 

B. MIME 

C. block list 

D. extension 

Answer: BD 


Leading JN0-332 practice question:

Q6. Which statement regarding the implementation of an IDP policy template is true? 

A. IDP policy templates are automatically installed as the active IDP policy. 

B. IDP policy templates are enabled using a commit script. 

C. IDP policy templates can be downloaded without an IDP license. 

D. IDP policy templates are included in the factory-default configuration. 

Answer: B 


Q7. By default, which condition would cause a session to be removed from the session table? 

A. Route entry for the session changed. 

B. Security policy for the session changed. 

C. The ARP table entry for the source IP address timed out. 

D. No traffic matched the session during the timeout period. 

Answer: D 


Q8. Regarding zone types, which statement is true? 

A. You cannot assign an interface to a functional zone. 

B. You can specifiy a functional zone in a security policy. 

C. Security zones must have a scheduler applied. 

D. You can use a security zone for traffic destined for the device itself. 

Answer: D 


Q9. When an SRX series device receives an ESP packet, what happens? 

A. If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, it will immediately decrypt the packet. 

B. If the destination IP address in the outer IP header of ESP does not match the IP address of the ingress interface, it will discard the packet. 

C. If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, based on SPI match, it will decrypt the packet. 

D. If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, based on SPI match and route lookup of inner header, it will decrypt the packet. 

Answer: C 


Q10. Which statement is correct about HTTP trickling? 

A. It prevents the HTTP client or server from timing-out during an antivirus update. 

B. It prevents the HTTP client or server from timing-out during antivirus scanning. 

C. It is an attack. 

D. It is used to bypass antivirus scanners. 

Answer: B