JN0-333 by Juniper Valid Free Exam Practice Test

Question 1

Which action will restrict SSH access to an SRX Series device from a specific IP address which is connected to a security zone named trust?

A. Implement a security policy from security zone junos-host to security zone trust. B. Implement a firewall filter on the security zone trust. C. Implement a security policy from security zone trust to security zone junos-host. D. Implement host-inbound-traffic system-services to allow SSH.

Correct Answer: C

Question 2

You want to protect your SRX Series device from the ping-of-death attack coming from the untrust security zone.
How would you accomplish this task?

A. Configure the application tracking parameter in the untrust security zone. B. Configure the appropriate screen and apply it to the [edit security zone security-zone untrust] hierarchy. C. Configure a from-zone untrust to-zone trust security policy that blocks ICMP traffic. D. Configure the host-inbound-traffic system-services ping except parameter in the untrust security zone.

Correct Answer: B

Question 3

Click to the Exhibit button.
Referring to the exhibit, which two statements are true? (Choose two.)

A. Interface ge-0/0/0.0 will respond to pings. B. Interface ge-0/0/0 will not accept SSH connections. C. Interfaces ge-0/0/0.0 and ge-0/0/1.0 will allow SSH connections. D. Interface ge-0/0/1.0 will respond to pings.

Correct Answer: C,D

Question 4

Click the Exhibit button.

Which statement would explain why the IP-monitoring feature is functioning incorrectly?

A. The secondary IP address should be on a different subnet than the reth IP address. B. The monitored IP address is not on the same subnet as the reth IP address. C. The secondary IP address is the same as the reth IP address. D. The global weight value is too large for the configured global threshold.

Correct Answer: C

Question 5

You want to support reth LAG interfaces on a chassis cluster.
Which setting must be enabled on the interconnecting switch to accomplish this task?

A. 802.3ad B. LLDP C. swfab D. RSTP

Correct Answer: A

Question 6

What are two supported hypervisors for hosting a vSRX? (Choose two.)

A. Docker B. KVM C. VMware ESXi D. Solaris Zones

Correct Answer: B,C

Question 7

Which statement is true about functional zones?

A. Functional zones are used for management. B. Functional zones provide a means of distinguishing groups of hosts and their resources from one another. C. Functional zones are the building blocks for security policies. D. Functional zones are a collection of regulated transit network segments.

Correct Answer: A

Question 8

You must verify if destination NAT is actively being used by users connecting to an internal server from the Internet.
Which action will accomplish this task on an SRX Series device?

A. Examine the installed routes in the packet forwarding engine. B. Examine the active security flow sessions. C. Examine the destination NAT translations table. D. Examine the NAT translation table.

Correct Answer: C

Juniper Security, Specialist (JNCIS-SEC) - JN0-333 Exam Practice Test