JN0-332 Exam Questions

Which three situations will trigger an e-mail to be flagged as spam if a branch SRX Series device has been properly configured with antispam inspection enabled for the appropriate...

Which statement is true regarding a session key in the Diffie-Hellman key-exchange process?

Which zone type will allow transit-traffic?

Which CLI command provides a summary of what the content-filtering engine has blocked?

Click the Exhibit button. You are the responder for an IPsec tunnel and you see the error messages shown in the exhibit. What is the problem?

Click the Exhibit button. In the exhibit, what is the function of the configuration statements?

A network administrator repeatedly receives support calls about network issues. After investigating the issues, the administrator finds that the source NAT pool is running out of a...

Which two statements are true when describing the capabilities of integrated Web filtering on branch SRX Series devices? (Choose two.)

Which statement is true when express AV detects a virus in TCP session?

Click the Exhibit button. Which command is needed to change this policy to a tunnel policy for a policy-based VPN?

Which two statements describe the difference between Junos software for security platforms and a traditional router? (Choose two.)

Using a policy with the policy-rematch flag enabled, what happens to the existing and new sessions when you change the policy action from permit to deny?

Which two content-filtering features does FTP support? (Choose two.)

Which statement is true about a NAT rule action of off?

You want to create an out-of-band management zone and assign the ge-0/0/0.0 interface to that zone. From the [edit] hierarchy, which command do you use to configure this assignment...

Host A opens a Telnet connection to Host B. Host A then opens another Telnet connection to Host A. These connections are the only communication between Host A and Host B. The secur...

Click the Exhibit button. A network administrator receives complaints that the application voicecube is timing out after being idle for 30 minutes. Referring to the exhibit, what i...

Which parameters are valid SCREEN options for combating operating system probes?

The Junos OS blocks an HTTP request due to its inclusion on the url-blacklist. Which form of Web filtering on the branch SRX device is fully executed within the device itself?

In the Junos OS, which statement is true?

Which statement is true about SurfControl integrated Web filter solution?

Click the Exhibit button. Referring to the exhibit, you are not able to telnet to 192.168.10.1 from client PC 192.168.10.10.What is causing the problem?

Which two statements are true regarding firewall user authentication? (Choose two.)

You want to create a security policy allowing traffic from any host in the Trust zone to hostb.example.com (172.19.1.1) in the Untrust zone. How do you create this policy?

Which three types of content filtering are supported only for HTTP? (Choose three.)

Which three represent IDP policy match conditions? (Choose three.)

Which two statements are true regarding the system-default security policy [edit security policies default-policy]? (Choose two.)

Which configuration shows the correct application of a security policy scheduler?

Which three functions are provided by the Junos OS for security platforms? (Choose three.)

Which three options represent IDP policy match conditions? (Choose three.)

Which three security concerns can be addressed by a tunnel mode IPsec VPN secured by ESP? (Choose three.)

Which two statements apply to policy scheduling? (Choose two.)

What are three different integrated UTM components available on the branch SRX Series devices? (Choose three.)

You want to test a configured screen value prior to deploying. Which statement will allow you to accomplish this?

Which three contexts can be used as matching conditions in a source NAT configuration? (Choose three.)

Which command shows the event and traceoptions file for chassis clusters?

Which encryption type is used to secure user data in an IPsec tunnel?

Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A Web server with IP address 10.20.20.1 is...

Which two types of attacks are considered to be denial of service? (Choose two.)

Which two statements are true about the Websense redirect Web filter solution? (Choose two.)

Click the Exhibit button. Referring to the exhibit, which statement contains the correct gateway parameters?

Content filtering enables traffic to be permitted or blocked based on inspection of which three types of content? (Choose three.)

Click the Exhibit button. Referring to the exhibit, what is the correct proxy-id?

Which two statements are true about AH? (Choose two.)

Which two packet attributes contribute to the identification of a session? (Choose two.)

Which interface is used for RTO synchronization and forwarding traffic between the devices in a cluster?

Click the Exhibit button. In the configuration shown in the exhibit, you decided to eliminate the junos-ftp application from the match condition of the policy My Traffic. What will...

Click the Exhibit button. Given the configuration shown in the exhibit, which configuration object would be used to associate both Nancy and Walter with firewall user authenticatio...

Which two statements are true about pool-based source NAT? (Choose two.)

What is the maximum number of layers of compression that kaspersky-lab-engine (full AV) can decompress for the HTTP protocol?