Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC) (JN0-332) Free Practice Test

Question 1

Which function does Diffie-Hellman exchange perform for IPsec VPN?

A. It encrypts end-user traffic between the two VPN peers.

B. It negotiates IPsec Phase 2 parameters with the VPN peer

C. It securely exchanges the pre-shared keys over the network.

D. It exchanges static routes with the VPN peer.

Correct Answer: C

Question 2

Antispam can be leveraged with which two features on a branch SRX Series device to provide maximum protection from malicious e-mail content? (Choose two.)

A. full AV

B. IPS

C. integrated Web filtering

D. local Web filtering

Correct Answer: A,B

Question 3

Which two statements are true for both express antivirus and full file-based antivirus? (Choose two.)

A. Both express antivirus and full file-based antivirus use the same scan engines.

B. The database pattern server is available through both HTTP and HTTPS.

C. Signature updates of the pattern database are obtained from Symantec.

D. Intelligent prescreening functionality is identical in both express antivirus and full antivirus.

Correct Answer: B,D

Question 4

You have implemented NAT on your SRX Series device. You now want to be notified if the configured NAT pool is nearing its maximum usage capacity.
Which two actions are required? (Choose two.)

A. Enable SNMP.

B. Enable RPM.

C. Enable the overflow pool tracking feature with the desired thresholds.

D. Enable the pool utilization alarm feature with the desired thresholds.

Correct Answer: A,D

Question 5

Which three methods of source NAT does the Junos OS support? (Choose three.)

A. source NAT with address shifting and PAT

B. source NAT with address shifting

C. interface-based source NAT without PAT

D. interface-based source NAT

E. source NAT using static source pool

Correct Answer: B,D,E

Question 6

You want to ensure end-to-end data connectivity through an IPsec tunnel.
Which feature would you activate?

A. VPN monitor

B. perfect forward secrecy

C. DPD

D. NHTB

Correct Answer: A

Question 7

Which statement is true about a NAT rule action of off?

A. The NAT action of off is only supported for destination NAT rule-sets.

B. The NAT action of off is useful for disabling NAT when a pool is exhausted.

C. The NAT action of off is useful for detailed control of NAT.

D. The NAT action of off is only supported for source NAT rule-sets.

Correct Answer: C

Question 8

Which command do you use to manually remove antivirus patterns?

A. request security utm anti-virus juniper-express-engine pattern-remove

B. request security utm anti-virus juniper-express-engine pattern-reload

C. request security utm anti-virus juniper-express-engine pattern-delete

D. delete security utm anti-virus juniper-express-engine antivirus-pattern

Correct Answer: C

Welcome to TestSimulate

Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC) (JN0-332) Free Practice Test