JN0-332 Exam Questions

The same Web site is visited for the second time using a branch SRX Series Services Gateway configured with Surf Control integrated Web filtering. Which statement is true?

To determine whether a particular file has a virus by only inspecting a few initial packets before receiving the entire file, which UTM feature do you enable?

Which element occurs first during the first-packet-path processing?

Which statement describes the behavior of source NAT with address shifting?

Which two statements are true about IPsec traffic? (Choose two.)

You must configure a SCREEN option that will protect your router from a session table flood. Which configuration meets this requirement?

Which two statements are true regarding high-availability chassis clustering? (Choose two.)

Which statement is true for interfaces residing outside of redundancy groups?

Under which configuration hierarchy is an access profile configured for firewall user authentication?

Which two statements are true about juniper-express-engine (express AV)? (Choose two.)

What are two uses of NAT? (Choose two.)

Which statement is true regarding NAT?

Which statement is true about zone interface assignment?

You want to ensure end-to-end data connectivity through an IPsec tunnel. Which feature would you activate?

In which two cases would you consider the TCP flag settings to be suspicious? (Choose two.)

Which operational mode command displays all active IKE phase 2 security associations?

Which three security policy actions are valid? (Choose three.)

Which URL database do branch SRX Series devices use when leveraging local Web filtering?

Your task is to provision the Junos security platform to permit transit packets from the Private zone to the External zone and send them through the IPsec VPN. You must also have t...

Which command would you use to enable chassis clustering on an SRX device, setting the cluster ID to 1 and node to 0?

Which two statements are true about route-based VPNs? (Choose two.)

What is the purpose of an address book?

Which two traffic types trigger pass-through firewall user authentication? (Choose two.)

How does the antivirus feature operate once the antivirus license has expired?

What are two valid match conditions for source NAT? (Choose two.)

Which two configuration elements are required for a policy-based VPN? (Choose two.)

Which two statements are true for both express antivirus and full file-based antivirus? (Choose two.)

Which statement is true about interfaces, zones, and routing-instance relationships?

What do you use to group interfaces with similar security requirements?

Which statement is true when express AV detects a virus in a TCP session?

Which statement describes the behavior of a security policy?

What are two rulebase types within an IPS policy on an SRX Series device? (Choose two.)

Click the Exhibit button. Which type of source NAT is configured in the exhibit?

Click the Exhibit button. user@host> show security utm web-filtering statistics UTM web-filtering statistics: Total requests: 298171 white list hit: 0 Black list hit: 0 Queries to...

Click the Exhibit button. [edit security policies from-zone HR to-zone trust] user@host# show policy two { match { source-address subnet_a; destination-address host_b; application...

Review Below: [edit security nat destination] user@host# show pool A { address 10.1.10.5/32; } rule-set 1 { from zone untrust; rule 1A { match { destination-address 100.0.0.1/32; }...

Regarding zone types, which statement is true?

Regarding attacks, which statement is correct?

Click the Exhibit button. [edit schedulers] user@host# show scheduler now { monday all-day; tuesday exclude; wednesday { start-time 07:00:00 stop-time 18:00:00; } thursday { start-...

Which two statements are true regarding proxy ARP? (Choose two.)

For IKE phase 1 negotiations, when is aggressive mode typically used?

A traditional router is better suited than a firewall device for which function?

Which two configuration tasks should you use to implement filter-based forwarding? (Choose two.)

What is the primary function of Junos Intrusion Prevention System (IPS)?

In terms of application and protocol recognition, how does the IPS engine inspect the traffic?

Which two protection mechanisms are supported on SRX Series Services Gateways? (Choose two)

You have a VoIP application that requires external sessions to be initiated into your environment. Your network only has a single public IP address configured on the egress interfa...

Users can define policy to control traffic flow between which two components? (Choose two.)

Which two configurations are valid? (Choose two.)

Which two configuration options must be present for IPv4 transit traffic to pass between the ge- 0/0/0.0 and ge-0/0/2.0 interfaces? (Choose two.)