JN0-332 Exam Questions

Which statement is correct about HTTP trickling?

For which network anomaly does Junos provide a SCREEN?

What is the proper sequence of evaluation for the SurfControl integrated Web filter solution?

A network administrator is using source NAT for traffic from source network 10.0.0.0/8. The administrator must also disable NAT for any traffic destined to the 202.2.10.0/24 networ...

The Junos OS blocks an HTTP request due to the category of the URL. Which form of Web filtering is being used?

Which two statements are true with regard to policy ordering? (Choose two.)

Regarding fast path processing, when does the system perform the policy check?

Which URL database do branch SRX Series devices use when leveraging local Web filtering?

How do you apply UTM enforcement to security policies on the branch SRX series?

What are two rule base types within an IPS policy on an SRX Series device? (Choose two.)

Which configuration shows a pool-based source NAT without PAT?

Which two statements are true regarding IDP? (Choose two.)

What is the purpose of a chassis cluster?

Which three statements are true when working with high-availability clusters? (Choose three.)

A network administrator wants to permit Telnet traffic initiated from the address book entry the10net in a zone called UNTRUST to the address book entry Server in a zone called TRU...

Which command do you use to manually remove antivirus patterns?

Which three parameters are configured in the IKE policy? (Choose three.)

Which two statements are true about the relationship between static NAT and proxy ARP? (Choose two.)

Which CLI command do you use to block MIME content at the [edit security utm feature-profile] hierarchy?

If both nodes in a chassis cluster initialize at different times, which configuration example will allow you to ensure that the node with the higher priority will become primary fo...

By default, how is traffic evaluated when the antivirus database update is in progress?

Which statement is true regarding IPsec VPNs?

Which command would you use to enable chassis cluster on an SRX device, setting the cluster ID to 1 and node to 0?

Which three are necessary for antispam to function properly on a branch SRX Series device? (Choose three.)

How many IDP policies can be active at one time on an SRX Series device by means of the set security idp active-policy configuration statement?

Which two statements regarding firewall user authentication client groups are true? (Choose two.)

Your task is to provision the Junos security platform to permit transit packets from the Private zone to the External zone by using an IPsec VPN and log information at the time of...

A user wants to establish an FTP session to a server behind an SRX device but must authenticate to a Web page on the SRX device for additional authentication. Which type of user au...

What is the functionality of redundant interfaces (reth) in a chassis cluster?

A network administrator receives complaints from the engineering group that an application on one server is not working properly. After further investigation, the administrator det...

What is the default session timeout for UDP sessions?

Which two statements about the Diffie-Hellman (DH) key exchange process are correct? (Choose two.)

You are required to configure a SCREEN option that enables IP source route option detection. Which two configurations meet this requirement? (Choose two.)

What are three configuration objects used to build Junos IDP rules? (Choose three.)

Click the Exhibit button. Assume the default-policy has not been configured. Given the configuration shown in the exhibit, which two statements about traffic from host_a in the HR...

When an SRX series device receives an ESP packet, what happens?

Click the Exhibit button. [A] establishes an IPsec tunnel with [B]. The NAT device translates the IP address 1.1.1.1 to 2.1.1.1.On which port is the IKE SA established?

Click the Exhibit button. What are two valid reasons for the output shown in the exhibit? (Choose two.)

What is the maximum number of layers of decompression that juniper-express-engine (express AV) can decompress for the HTTP protocol?

Which three features are part of the branch SRX series UTM suite? (Choose three.)

What are two TCP flag settings that are considered suspicious? (Choose two.)

The Junos OS blocks an HTTP request due to a Websense server response. Which form of Web filtering is being used?

Which two statements are true regarding redundancy groups? (Choose two.)

What are two components of the Junos software architecture? (Choose two.)

Which IDP policy action closes the connection and sends an RST packet to both the client and the server?

Which statement describes the UTM licensing model?

You have configured a UTM profile called Block-Spam, which has the appropriate antispam configuration to block undesired spam e-mails. Which configuration would protect an SMTP ser...

Which two statements about the use of SCREEN options are correct? (Choose two.)

Click the Exhibit button. Given the configuration shown in the exhibit, which protocol(s) are allowed to communicate with the device on ge-0/0/0.0?

Which two statements about static NAT are true? (Choose two.)