Juniper JN0-332 問題集

質問 1：
Referring to the exhibit, you have just committed the UTM antivirus configuration. You notice that the SRX Series device shows that Kaspersky scanning is being used instead of express scanning. What must you do to resolve this problem?
A. You must configure the antivirus type to use express scanning
B. You must update the antivirus signatures
C. You must configure the antivirus type to disable Kaspersky
D. You must wait until the next pattern update
正解：A

質問 2：
Which two statements are correct about IPsec security associations? (Choose two.)
A. established during IKE Phase 2 negotiations
B. security associations are unidirectional
C. established during IKE Phase 1 negotiations
D. security associations are bidirectional
正解：A,B

質問 3：
Which statement accurately describes firewall user authentication?
A. Firewall user authentication enables session-based forwarding.
B. Firewall user authentication is used as a last resort security method in a network.
C. Firewall user authentication provides a means for accessing a JUNOS Software-based security device.
D. Firewall user authentication provides another layer of security in a network.
正解：D

質問 4：
What are three main phases of an attack? (Choose three.)
A. exploit
B. DoS
C. propagation
D. port scanning
E. reconnaissance
正解：A,C,E

質問 5：
To determine whether a particular file has a virus by only inspecting a few initial packets before receiving the entire file, which UTM feature do you enable?
A. trickling
B. intelligent pre-screening
C. scan mode extensions
D. URL white lists
正解：B

質問 6：
Click the Exhibit button.

A network administrator receives complaints that the application voicecube is timing out after being idle for 30 minutes. Referring to the exhibit, what is a resolution?
A. [edit]
user@host# set security policies from-zone trust to-zone trust policy intrazone then timeout
never
B. [edit]
user@host# set applications application voicecube inactivity-timeout 2
C. [edit]
user@host# set applications application voicecube destination-port 5060
D. [edit]
user@host# set applications application voicecube inactivity-timeout never
正解：D

質問 7：
Which two statements are true about pool-based source NAT? (Choose two.)
A. PAT is enabled by default.
B. It supports the address-persistent configuration option.
C. PAT is not supported.
D. It supports the junos-global configuration option.
正解：A,B

質問 8：
You are configuring source NAT.
Which three elements are used for matching the traffic direction in the from and to statements? (Choose three.)
A. source address
B. zone
C. routing instance
D. destination address
E. interface
正解：B,C,E

質問 9：
You want to enable local logging for security policies and have the log information stored in a separate file on a branch SRX Series device.
Which configuration will accomplish this task?
A. [edit system syslog]
user@host# show
file sec-pol-log {
user info;
}
B. [edit system syslog]
user@host# show
file sec-pol-log {
security info;
}
C. [edit system syslog]
user@host# show
host 192.168.1.1 {
user info;
}
D. [edit system syslog]
user@host# show
file sec-pol-log {
any any;
}
正解：A