Sie sind auf Seite 1von 8

PASSTEST

https://www.passtest.jp/
高質量の国際認定試験問題集の提供者、試験に合格させろう!
Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

Exam : JN0-334

Title : Security, Specialist (JNCIS-SEC)

Vendor : Juniper

Version : DEMO

1 from Passtest.jp.
Get Latest & Valid jn0-334 Exam's Question and Answers 1
http://www.passtest.jp/Juniper/JN0-334-shiken.html
Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

NO.1 You want to implement IPsec on your SRX Series devices, but you do not want to use a
preshared key.
Which IPsec implementation should you use?
A. next-hop tunnel binding
B. aggressive mode
C. tunnel mode
D. public key infrastructure
Answer: D

NO.2 Click the Exhibit button.

2 from Passtest.jp.
Get Latest & Valid jn0-334 Exam's Question and Answers 2
http://www.passtest.jp/Juniper/JN0-334-shiken.html
Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

3 from Passtest.jp.
Get Latest & Valid jn0-334 Exam's Question and Answers 3
http://www.passtest.jp/Juniper/JN0-334-shiken.html
Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

Which statement would explain why the IP-monitoring feature is functioning incorrectly?
A. The secondary IP address is the same as the reth IP address.
B. The secondary IP address should be on a different subnet than the reth IP address.
C. The global weight value is too large for the configured global threshold.
D. The monitored IP address is not on the same subnet as the reth IP address.
Answer: A

NO.3 Click the Exhibit button.

Users at a remote office are unable to access an FTP server located at the remote corporate data
center as expected. The remote FTP server is listening on the non-standard TCP port 2121.
Referring to the exhibit, what is causing the problem?
A. Two custom FTP applications must be defined to allow bidirectional FTP communication through
the SRX Series device.
B. A new security policy must be defined between the untrust and trust zones.
C. The custom FTP application definition does not have the FTP ALG enabled.
D. The FTP clients must be configured to listen on non-standard client ports for the FTP data channel
negotiations to succeed.
Answer: B

NO.4 Which process describes the implementation of screen options on an SRX Series device?
A. Configured screen options are only applied when traffic does not match a valid route.
B. Configured screen options are only applied when traffic does not match a valid policy.
C. Configured screen options are applied only to the first packet that is processed in a stateful
session.
D. Configured screen options are applied to all packets that are processed by the stateful session
firewall processor.
Answer: D

4 from Passtest.jp.
Get Latest & Valid jn0-334 Exam's Question and Answers 4
http://www.passtest.jp/Juniper/JN0-334-shiken.html
Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

NO.5 What is the correct ordering of Junos policy evaluation from first to last?
A. global policy > zone-based policy > default policy
B. zone-based policy > global policy > default policy
C. default policy > zone-based policy > global policy
D. global policy > default policy > zone-based policy
Answer: B

NO.6 Click the Exhibit button.

5 from Passtest.jp.
Get Latest & Valid jn0-334 Exam's Question and Answers 5
http://www.passtest.jp/Juniper/JN0-334-shiken.html
Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

6 from Passtest.jp.
Get Latest & Valid jn0-334 Exam's Question and Answers 6
http://www.passtest.jp/Juniper/JN0-334-shiken.html
Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

Referring to the exhibit, what will happen if client 172.16.128.50 tries to connect to destination
192.168.150.3 using HTTP?
A. The client will be denied by policy p3.
B. The client will be permitted by policy p1.
C. The client will be permitted by the global policy.
D. The client will be denied by policy p2.
Answer: C

NO.7 What is the function of redundancy group 0 in a chassis cluster?


A. The primary node for redundancy group 0 determines the interface naming for all chassis cluster
nodes.
B. Redundancy group 0 identifies the node controlling the cluster management interface IP
addresses.
C. The node on which redundancy group 0 is primary determines which Routing Engine is active in
the cluster.
D. The primary node for redundancy group 0 identifies the first member node in a chassis cluster.
Answer: C

7 from Passtest.jp.
Get Latest & Valid jn0-334 Exam's Question and Answers 7
http://www.passtest.jp/Juniper/JN0-334-shiken.html