JN0-330-Enhanced Services, Specialist(JNCIS-ES) (JN0-330) Free Practice Test

Question 1

Click the Exhibit button.
In the exhibit, R1 learns prefix 137.10/16 from BGP. In addition, you configured a static route in R1 and injected it into OSPF. R1 and R2 are OSPF and BGP peers.
By default, which protocol would R2 prefer when forwarding a packet to the destination
137.10/16?

A. static route

B. load balance between OSPF and BGP

C. OSPF

D. BGP

Correct Answer: C

Question 2

In JUNOS software with enhanced services, which three packet elements are inspected to determine if a session already exists? (Choose three.)

A. source and destination TCP/UDP port

B. source and destination IP address

C. source and destination MAC address

D. IP time-to-live

E. IP protocol

Correct Answer: A,B,E

Question 3

For interfaces that are not part of redundant groups, which statement is true?

A. All interfaces will be redundant if they reside on a system that is part of a JSRP cluster.

B. Interfaces that are not in a redundancy group can still forward traffic, but no redundancy is available for them.

C. The interfaces cannot be mapped to security zones.

D. Only interfaces that have redundancy can be active in the JSRP cluster.

Correct Answer: B

Question 4

Which statement is correct?

A. DoS attacks are directed at the network protection devices, while propagation attacks are directed at the servers.

B. Both DoS and propagation attacks exploit and take control of all unprotected network devices.

C. Propagation attacks focus on suspicious packet formation using the DoS SYN-ACK- ACK proxy flood.

D. DoS attacks are exploits in nature, while propagation attacks use trust relationships to take control of the devices.

Correct Answer: D

Question 5

Click the Exhibit button.
In the exhibit, you decided to change myHosts addresses.
What will happen to the new sessions matching the policy and in-progress sessions that had already matched the policy?

A. New sessions will be evaluated. All in-progress sessions will continue.

B. New sessions will halt until all in-progress sessions are re-evaluated. In-progress sessions will be re-evaluated and possibly dropped.

C. New sessions will be evaluated. All in-progress sessions will be dropped.

D. New sessions will continue. In-progress sessions will be re-evaluated.

Correct Answer: D

Question 6

Which three parameters are configured in the IKE policy? (Choose three.)

A. dead peer detection settings

B. mode

C. preshared key

D. security proposals

E. external interface

Correct Answer: B,C,D

Question 7

Interface ge-0/0/0.0 of your router is attached to the Internet and is configured with an IP address and network mask of 71.33.252.19/24. A host with IP address 10.20.20.1 is running an SSH service on TCP port 2222. This host is attached to the ge-0/0/3.0 interface of your router. You must use interface-based static NAT to make the SSH service on the host reachable from the Internet.
On which IP address and TCP port can Internet hosts reach the SSH service?

A. IP address 71.33.251.1 and TCP port 22

B. IP address 71.33.252.19 and TCP port 22

C. IP address 71.33.252.20 and TCP port 2222

D. IP address 10.20.20.1 and TCP port 2222

Correct Answer: C

Question 8

Which two configuration elements are required for a policy-based VPN? (Choose two.)

A. secure tunnel interface

B. IKE gateway

C. security policy to permit the IKE traffic

D. tunnel policy referencing the IPSec VPN

Correct Answer: B,D

Welcome to TestSimulate

Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) (JN0-330) Free Practice Test