Juniper JN0-330 問題集

質問 1：
When devices are in cluster mode, which new interfaces are created?
A. SP, FXP1, RETH, FAB0, and FAB1 are created.
B. FXP0, FXP1, RETH, FAB0, FAB1 are created.
C. No new interface is created.
D. Only the sp interface is created.
正解：B

質問 2：
Which three parameters are configured in the IKE policy? (Choose three.)
A. security proposals
B. preshared key
C. dead peer detection settings
D. external interface
E. mode
正解：A,B,E

質問 3：
Click the Exhibit button.
In the exhibit, which statement is correct?

A. Three physical interfaces are redundant.
B. node 0 will immediately become primary in the cluster.
C. You must define an additional Redundancy Group.
D. You must issue an operational command and reboot the system for the above configuration to take effect.
正解：D

質問 4：
Click the Exhibit button.
Which configuration would result in the output shown in the exhibit?

A. [edit security zones functional-zone management]
user@host# show
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
protocols {
bgp;
ospf;
vrrp;
}
host-inbound-traffic {
protocols {
all;
vrrp {
except;
}
B. [edit security zones security-zone trust]
user@host# show
host-inbound-traffic {
protocols {
bgp;
}
interfaces {
all {
host-inbound-traffic {
protocols {
ospf;
}
C. [edit security zones security-zone trust]
user@host# show
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
protocols {
ospf;
bgp;
}
D. [edit security zones functional-zone management]
user@host# show
host-inbound-traffic {
protocols {
bgp;
ospf;
}
正解：C

質問 5：
Which statement is true about source pool NAT without port translation?
A. Source NAT pools allow for different connections from the same source IP address to be translated to different IP addresses in the pool.
B. Once a connection is established from a source, all new connections from that source are translated to the same IP address in the pool.
C. Source pool NAT defines a one-to-one mapping from an original source IP address to a translated source IP address and port numbers for a range of IP addresses.
D. Source pool NAT defines a one-to-one mapping from an original source IP address to a translated source IP address for a range of IP addresses.
正解：B

質問 6：
Which two statements about the Diffie-Hellman (DH) key exchange process are correct?
(Choose two.)
A. In the DH key exchange process, the session key is passed across the network to the peer for confirmation.
B. In the DH key exchange process, the session key is never passed across the network.
C. In the DH key exchange process, the public and private keys are mathematically related using the DH algorithm.
D. In the DH key exchange process, the public and private keys are not mathematically related, ensuring higher security.
正解：B,C

質問 7：
You must configure a policy-based VPN. Which command causes traffic to be sent through an IPSec VPN named remote-vpn?
A. [edit security policies from-zone trust to-zone untrust]
user@host# set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn
B. [edit security policies from-zone trust to-zone untrust]
user@host# set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn
C. [edit security policies from-zone trust to-zone untrust]
user@host# set policy tunnel-traffic then permit ipsec-vpn remote-vpn
D. [edit security policies from-zone trust to-zone untrust]
user@host# set policy tunnel-traffic then tunnel remote-vpn
正解：B

質問 8：
Which type of zone is used by traffic transiting the device?
A. functional zone
B. transit zone
C. default zone
D. security zone
正解：D