JN0-332 Exam Questions

Which two statements are true regarding security policies on an SRX Series device? (Choose two)

Which UTM feature requires a license to function on an SRX branch series device?

Which two statements are true concerning policy-based IPsec VPNs on an SRX Series device? (Choose two)

You are creating a security policy on an SRX Series device with a permit action. What are two possible actions the device also performs on matching traffic? (Choose two)

Which screen drops packets with a protocol field value of 137 or greater?

You are attempting to set up an IPsec VPN between an SRX240 and another vendor's firewall. The phase 1 security associations are up, but the phase 2 security associations are not p...

Which SRX5400 component is responsible for forwarding a packet?

You are asked to implement a chassis cluster. What are two requirements? (Choose two.)

You issued a factory reset to your SRX210 and ping the vlan 0 interface from hosts in both the trust and untrust zones. Which two results do you expect? (Choose two)

Which three statements describe ALGs on an SRX Series device? (Choose three)

Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

Click the Exhibit button. Your team is unable to open more than four HTTP sessions to a traffic monitoring tool hosted on the Internet accessed through an SRX Series device. Referr...

Click the Exhibit button. You are setting up a chassis cluster with two SRX240 devices with node0 as primary and node1 as secondary. You notice each node shows the other node as lo...

Which statement is true about high availability (HA) chassis clusters for the SRX Series device?

You are testing a custom HTTP application and are required to open all ports for inbound host traffic to your SRX Senes device. Which configuration parameter would you use to meet...

Click the Exhibit button. Referring to the exhibit, you have added a logical interface to a new security zone on an SRX Series device. You received an error after issuing the commi...

You are asked to establish an IPsec VPN to a neighboring device that receives its external IP address from a DHCP server. Which feature must be used on an SRX Series device?

Click the Exhibit button. Referring to the exhibit, assume the node0 impairment was caused by a reth interface going down. When the interface comes back online, which statement wou...

Click the Exhibit button. Given the configuration shown in the exhibit, which statement is correct?

Which two statements are correct about processing traffic entering an IPSec tunnel on an SRX Series device? (Choose two)

Click the Exhibit button. The phase 1 tunnel of a site-to-site VPN is not establishing as shown in the exhibit. What would you do to resolve the problem on your SRX Series device?

A static NAT rule and a destination NAT rule both match the same traffic on an SRX Series device. How is the traffic processed?