JN0-334試験問題を今すぐ試そう！最新の[2021年最新] 正解回答付き
練習できるJN0-334には認定ガイド問題と解答とトレーニングを提供しています
質問 24
Click the Exhibit button.
Which two statements describe the output shown in the exhibit? (Choose two.)
- A. Redundancy group 1 experienced an operational failure.
- B. Node 0 is passing traffic for redundancy group 1.
- C. Node 1 is passing traffic for redundancy group1.
- D. Redundancy group 1 was administratively failed over.
正解: C,D
質問 25
In an Active/Active chassis cluster deployment which chassis cluster component is responsible for RGO traffic?
- A. the master routing engine of the secondary node
- B. the primary node
- C. the backup routing engine of the primary node
- D. the secondary node
正解: B
質問 26
You are deploying the Junos application firewall feature in your network In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)
- A. destination IP address
- B. source IP address
- C. source port
- D. destination port
正解: A,C
質問 27
Click the Exhibit button.
Host A is attempting to connect to Host B using the domain name, which is tied to a public IP address. All attempts to connect to Host B have failed. You have examined the configuration on your SRX340 and determined that a NAT policy is required.
Referring to the exhibit, which two NAT types will allow Host A to connect to Host B? (Choose two.)
- A. NAT-T
- B. source NAT
- C. destination NAT
- D. static NAT
正解: C,D
質問 28
You are asked to convert two standalone SRX Series devices to a chassis cluster deployment. You must ensure that your IPsec tunnels will be compatible with the new deployment.
In this scenario, which two interfaces should be used when binding your tunnel endpoints? (Choose two.)
- A. pp0
- B. lo0
- C. reth
- D. ge
正解: C,D
質問 29
Which two statements apply to policy scheduling? (Choose two.)
- A. A policy refers to many schedules.
- B. Multiple policies can refer to the same schedule.
- C. A policy stays active regardless of when the schedule is active.
- D. A policy refers to one schedule.
正解: B,D
解説:
Explanation/Reference: https://www.juniper.net/documentation/en_US/cso5.4.0/topics/concept/cp-about-schedule- overview.html
質問 30
Which two statements describe application-layer gateways (ALGs)? (Choose two.)
- A. ALGs are designed for specific protocols that use a single TCP session.
- B. ALGs are used with protocols that use multiple ports.
- C. ALGs are designed for specific protocols that require multiple sessions.
- D. ALGs can only be configured using Security Director.
正解: B,C
質問 31
Click the Exhibit button.
You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172.25.11.0/24 subnet to the Internet. You create a policy named permit - http between the trust and untrust zones that permits HTTP traffic.
When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.
Which two actions would correct the error? (Choose two.)
- A. Create a custom application named http at the [edit applications] hierarchy.
- B. Execute the Junos commit full command to override the error and apply the configuration.
- C. Modify the security policy to use the built-in junos-http application.
- D. Issue the rollback 1command from the top of the configuration hierarchy and attempt the commit again.
正解: B,C
質問 32
Which three features are parts of Juniper Networks' AppSecure suite? (Choose three.)
- A. AppFormix
- B. AppQoE
- C. AppQoS
- D. Secure Application Manager
- E. APBR
正解: B,C,E
質問 33
Which two protocols are supported for Sky ATP advanced anti-malware scanning? (Choose two.)
- A. POP3
- B. IMAP
- C. SMTP
- D. MAPI
正解: B,C
質問 34
The AppQoE module of AppSecure provides which function?
- A. The AppQoE module prioritizes important applications.
- B. The AppQoE module blocks access to risky applications.
- C. The AppQoE module provides routing, based on network conditions.
- D. The AppQoE module provides application-based routing.
正解: D
解説:
Explanation
質問 35
When working with network events on a Juniper Secure Analytics device, flow records come from which source?
- A. tap port
- B. mirror
- C. SPAN
- D. switch
正解: C
質問 36
When considering managed sessions, which configuration parameter determines how full the session table must be to implement the early age-out function?
- A. session service timeout
- B. high waremark
- C. low watermark
- D. policy rematch
正解: B
解説:
Explanation
質問 37
Exhibit.
Referring to the exhibit, which statement is true?
- A. IDP blocks not users
- B. IDP closes the connection on matched sessions.
- C. IDP ignores the connection on matched sessions
- D. IDP blocks all users
正解: A
質問 38
Which three features are parts of Juniper Networks' AppSecure suite? (Choose three.)
- A. AppFormix
- B. AppQoE
- C. AppQoS
- D. Secure Application Manager
- E. APBR
正解: B,C,E
解説:
Explanation/Reference:
https://www.juniper.net/documentation/en_US/junos/information-products/pathway-pages/security/security- application-identification.pdf
質問 39
Which two statements are true about virtualized SRX Series devices? (Choose two.)
- A. cSRX can be deployed in routed mode.
- B. cSRX cannot be deployed in routed mode.
- C. vSRX cannot be deployed in transparent mode.
- D. vSRX can be deployed in transparent mode.
正解: A,D
解説:
https://www.juniper.net/documentation/en_US/csrx/information-products/pathway-pages/security-csrx-contrail-guide-pwp.pdf
質問 40
What are two valid JIMS event log sources? (Choose two.)
- A. Microsoft Exchange Server event logs
- B. Microsoft Active Directory server event logs
- C. Microsoft Active Directory audit logs
- D. Microsoft Windows Server 2012 audit logs
正解: A,B
解説:
Explanation/Reference:
質問 41
Click the Exhibit button.
Referring to the exhibit, which two values in the JIMS SRX client configuration must match the values configured on the SRX client? (Choose two.)
- A. Token Lifetime
- B. Client ID
- C. Client Secret
- D. IPv6 Reporting
正解: B,C
質問 42
Data plane logging operates in which two modes? (Choose two.)
- A. syslog
- B. stream
- C. binary
- D. event
正解: B,D
解説:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/system-logging-for-a- security-device.html
質問 43
You are asked to improve resiliency for individual redundancy groups in an SRX4600 chassis cluster. Which two features would accomplish this task? (Choose two.)
- A. control link recovery
- B. interface monitoring
- C. IP address monitoring
- D. dual fabric links
正解: B,C
質問 44
Which security log message format reduces the consumption of CPU and storage?
- A. WELF
- B. binary
- C. structured syslog
https://www.juniper.net/documentation/en_US/junos/topics/concept/security-binary-logging-understanding.html Security log messages can also be maintained in text-based formats. Because security logging can produce large amounts of data, however, text-based log files can quickly consume storage and CPU resources. Depending on your implementation of security logging, a log file in a binary-based format can provide more efficient use of on-box or off-box storage and improved CPU utilization. Binary format for security log messages is available on all SRX Series devices. - D. BSD syslog
正解: B
質問 45
What are the maximum number of supported interfaces on a vSRX hosted in a VMware environment?
- A. 0
- B. 1
- C. 2
- D. 3
正解: D
質問 46
Click the Exhibit button.
You are configuring an SRX chassis cluster with the node-specific hostname and management address.
Referring to the exhibit, which configuration completes this requirement?
A)
B)
C)
D)
- A. Option D
- B. Option B
- C. Option A
- D. Option C
正解: D
質問 47
Exhibit.
You have configured your SRX Series device to receive authentication information from a JIMS server However, the SRX is not receiving any authentication information Referring to the exhibit, how would you solve the problem'
- A. Change the SRX configuration to connect to the JIMS server using HTTP
- B. Use the JIMS Administrator user interface to add the SRX device as a client.
- C. Update the IP address of the JIMS server
- D. Generate an access token on the SRX device that matches the access token on the JIMS server
正解: C
質問 48
What information does JIMS collect from domain event log sources? (Choose two.)
- A. For device login events. JIMS collects the devide IP address and operating system version.
- B. For user login events, JIMS collects the login source IP address and username information.
- C. For user login events, JIMS collects the username and group membership information.
- D. For device login events, JIMS collects the device IP address and machine name information.
正解: B,D
質問 49
......
試験準備には欠かさない！トップクラスのJuniper JN0-334試験アプリ学習ガイド練習問題最新版：https://jp.fast2test.com/JN0-334-premium-file.html