Juniper JN0-330 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Security Services Configuration | - Security zones and policies - Application identification and filtering - Stateful firewall concepts |
| Topic 2: Junos Platform Fundamentals for Services | - Interface types and service handling behavior - Junos OS architecture and services processing |
| Topic 3: Network Address Translation (NAT) | - Static NAT and NAT troubleshooting - Source NAT and destination NAT |
| Topic 4: Routing and Service Integration | - Routing instances and policy-based routing - Service integration with routing policies |
| Topic 5: Troubleshooting and Monitoring | - Logs, traceoptions, and debugging tools - Traffic flow analysis |
| Topic 6: VPN Technologies | - Site-to-site VPN configuration - IPsec VPN fundamentals |
Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) Sample Questions:
1. Click the Exhibit button.
Based on the exhibit, client PC 192.168.10.10 cannot ping 1.1.1.2.
Which is a potential cause for this problem?
A) The untrust zone does not have a management policy configured.
B) No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.
C) The trust zone does not have ping enabled as host-inbound-traffic service.
D) The security policy from the trust zone to the untrust zone does not permit ping.
2. Your task is to provision the router running JUNOS software with enhanced services to permit transit packets from the Private zone to the External zone by using an IPSec VPN and log information at the time of session close.
Which configuration meets this requirement?
A) [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
log;
count session-close;
}
B) [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
log {
session-close;
}
C) [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
log {
session-init;
}
D) [edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
count {
session-close;
}
3. A route-based VPN is required for which scenario?
A) when multiple networks need to be reached across the tunnel
B) when the remote VPN peer is a dialup or remote access client
C) when a dynamic routing protocol such as OSPF is required across the VPN
D) when the remote VPN peer is behind a NAT device
4. Prior to applying SCREEN options to drop traffic, you want to determine how your configuration will affect traffic. Which mechanism would you configure to achieve this objective?
A) the permit option for the particular SCREEN option
B) the SCREEN option, because it does not drop traffic by default
C) the alarm-without-drop option for the particular SCREEN option
D) the log option for the particular SCREEN option
5. You want to enable SSH and Telnet access to the router's CLI. Under which configuration hierarchy would you enable these protocols?
A) [edit system services]
B) [edit security services]
C) [edit system cli]
D) [edit security cli]
Solutions:
| Question # 1 Answer: D | Question # 2 Answer: B | Question # 3 Answer: C | Question # 4 Answer: C | Question # 5 Answer: A |
977 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
