Juniper JN0-333 - Security, Specialist (JNCIS-SEC) Exam

Page:    1 / 15   
Total 75 questions

What are two supported hypervisors for hosting a vSRX? (Choose two.)

  • A. VMware ESXi
  • B. Solaris Zones
  • C. KVM
  • D. Docker


Answer : AC

You are asked to change when your SRX high availability failover occurs. One network interface is considered more important than others in the high availability configuration. You want to prioritize failover based on the state of that interface.
Which configuration would accomplish this task?

  • A. Create a VRRP group configuration that lists the reth"™s IP address as the VIP while using each physical interface that make up the reth definition of each SRX HA pair.
  • B. Configure IP monitoring of the important interface"™s IP address and adjust the heartbeat interval and heartbeat threshold to the shortest settings.
  • C. Create a separate redundancy group to isolate the important interface; set the priority of the new redundancy group to 255.
  • D. Configure interface monitor inside the redundancy group that contains the important physical interface; adjust the weight associated with the monitored interface to 255.


Answer : D

Which three Encapsulating Security Payload protocols do the SRX Series devices support with IPsec? (Choose three.)

  • A. DES
  • B. RC6
  • C. TLS
  • D. AES
  • E. 3DES


Answer : ADE

What are three characteristics of session-based forwarding, compared to packet-based forwarding, on an SRX Series device? (Choose three.)

  • A. Session-based forwarding uses stateful packet processing.
  • B. Session-based forwarding requires less memory.
  • C. Session-based forwarding performs faster processing of existing session.
  • D. Session-based forwarding uses stateless packet processing,
  • E. Session-based forwarding uses six tuples of information.


Answer : ACE

You have configured source NAT with port address translation. You also need to guarantee that the same IP address is assigned from the source NAT pool to a specific host for multiple concurrent sessions.
Which NAT parameter would meet this requirement?

  • A. port block-allocation
  • B. port range twin-port
  • C. address-persistent
  • D. address-pooling paired


Answer : D

Page:    1 / 15   
Total 75 questions