JN0-331 試験問題を無料オンラインアクセス

Regarding zone types, which statement is true?

• A.You can use a security zone for traffic destined for the device itself.
• B.You can specifiy a functional zone in a security policy.
• C.Security zones must have a scheduler applied.
• D.You cannot assign an interface to a functional zone.

Which two functions of JUNOS Software are handled by the data plane? (Choose two.)

• A.NAT
• B.SNMP
• C.OSPF
• D.SCREEN options

Which attribute is optional for IKE phase 2 negotiations?

• A.proxy-ID
• B.phase 2 proposal
• C.security protocol (ESP or AH)
• D.Diffie-Hellman group key

Click the Exhibit button.
[edit security policies]
user@hostl# show
from-zone Private to-zone External {
policy MyTraffic {
match {
source-address myHosts;
destination-address ExtServers;
application [ junos-ftp junos-bgp ];
}
then {
permit {
tunnel {
ipsec-vpn vpnTunnel;
}}}}}
policy-rematch;
In the configuration shown in the exhibit, you decided to eliminate the junos-ftp application
from the match condition of the policy MyTraffic. What will happen to the existing FTP and BGP sessions?

• A.The existing FTP and BGP sessions will continue.
• B.The existing FTP sessions will continue and only the existing BGP sessions will be dropped.
• C.The existing FTP and BGP sessions will be re-evaluated and only FTP sessions will be dropped.
• D.The existing FTP and BGP sessions will be re-evaluated and all sessions will be dropped.

Which statement is true about a NAT rule action of off?

• A.The NAT action of off is only supported for destination NAT rule-sets.
• B.The NAT action of off is useful for disabling NAT when a pool is exhausted.
• C.The NAT action of off is only supported for source NAT rule-sets.
• D.The NAT action of off is useful for detailed control of NAT.