JN0-333 Practice Test Questions – Security, Specialist (JNCIS-SEC) – PassQuestion Free Questions To Test Online

1. What are two supported hypervisors for hosting a vSRX? (Choose two.)

VMware ESXi

Solaris Zones

KVM

Docker

2. You are asked to change when your SRX high availability failover occurs. One network interface is considered more important than others in the high availability configuration. You want to prioritize failover based on the state of that interface.

Which configuration would accomplish this task?

Create a VRRP group configuration that lists the reth’s IP address as the VIP while using each physical interface that make up the reth definition of each SRX HA pair.

Configure IP monitoring of the important interface’s IP address and adjust the heartbeat interval and heartbeat threshold to the shortest settings.

Create a separate redundancy group to isolate the important interface; set the priority of the new redundancy group to 255.

Configure interface monitor inside the redundancy group that contains the important physical interface; adjust the weight associated with the monitored interface to 255.

3. Which three Encapsulating Security Payload protocols do the SRX Series devices support with IPsec? (Choose three.)

DES

RC6

TLS

AES

3DES

4. What are three characteristics of session-based forwarding, compared to packet-based forwarding, on an SRX Series device? (Choose three.)

Session-based forwarding uses stateful packet processing.

Session-based forwarding requires less memory.

Session-based forwarding performs faster processing of existing session.

Session-based forwarding usesstateless packet processing,

Session-based forwarding uses six tuples of information.

5. You have configured source NAT with port address translation. You also need to guarantee that the same IP address is assigned from the source NAT pool to a specific host for multiple concurrent sessions.

Which NAT parameter would meet this requirement?

port block-allocation

port range twin-port

address-persistent

address-pooling paired

6. Which two statements about security policy actions are true? (Choose two.)

The log action implies an accept action.

The log action requires an additional terminating action.

The countaction implies an accept action.

The count action requires an additional terminating action.

7. Which two statements are true about global security policies? (Choose two.)

Global security policies are evaluated before regular security policies.

Global security policies can be configured to match addresses across multiple zones.

Global security policies can match traffic regardless of security zones.

Global security policies do not support IPv6 traffic.

8. Which statement is true about functional zones?

Functional zones are a collection of regulated transit network segments.

Functional zones provide a means of distinguishing groups of hosts and their resources from oneanother.

Functional zones are used for management.

Functional zones are the building blocks for security policies.

9. You have recently configured an IPsec tunnel between two SRX Series devices. One of the devices is assigned an IP address using DHCP with an IP address that changes frequently. Initial testing indicates that the IPsec tunnel is not working. Troubleshooting has revealed that Phase 1 negotiations are failing.

Which two actions would solve the problem? (Choose two.)

Verify that the device with the IP address assigned by DHCP is the traffic initiator.

Verify that VPN monitoring is enabled.

Verify that the IKE policy is configured for aggressive mode.

Verify that PKI is properly configured.

10. Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

scheduler

pass-through authentication

ALGs

counters

JN0-333 Practice Test Questions – Security, Specialist (JNCIS-SEC)

JN0-333 Practice Test Questions – Security, Specialist (JNCIS-SEC)

Leave a Reply Cancel reply