最新的Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) - JN0-330免費考試真題

A. For H323 and FTP to work, the administrator must disable the application layer gateway within the policy.

B. The administrator must configure the application layer gateways in conjunction with the security policies.

C. The administrator must configure a single security policy that allows the control traffic for both protocols. Application layer gateways will dynamically create the appropiate sessions to allow the data traffic.

D. The administrator must configure multiple security policies. One policy allows the control traffic for both protocols and one policy allows the data traffic for both protocols.

A. 1 minute

B. 5 minutes

C. 30 seconds

D. 30 minutes

A. stateful ARP lookups

B. VPN establishment

C. inspection of packets at higher levels (Layer 4 and above)

D. network address translation

E. transparent mode operation

A. All routers in a given area or level forward link state advertisements between interfaces in the same area or level, adding their metric to the link state advertisement's cost information when they forward it.

B. All routers in a given area or level build a consistent database describing the network's topology.

C. Routers choose a best path for a destination based on the SPF algorithm.

D. Routers choose the best path for a destination based on the interface on which they received the link state advertisement with the lowest cost.

A. source and destination MAC address

B. source and destination IP address

C. IP time-to-live

D. source and destination TCP/UDP port

E. IP protocol

A. policy-statement

B. distribute-list

C. prefix-list

D. route-map

A. [edit security zones security-zone trust]
user@host# show
host-inbound-traffic {
protocols {
bgp;
}
interfaces {
all {
host-inbound-traffic {
protocols {
ospf;
}

B. [edit security zones security-zone trust]
user@host# show
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
protocols {
ospf;
bgp;
}

C. [edit security zones functional-zone management]
user@host# show
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
protocols {
bgp;
ospf;
vrrp;
}
host-inbound-traffic {
protocols {
all;
vrrp {
except;
}

D. [edit security zones functional-zone management]
user@host# show
host-inbound-traffic {
protocols {
bgp;
ospf;
}

A. All interfaces will be redundant if they reside on a system that is part of a JSRP cluster.

B. The interfaces cannot be mapped to security zones.

C. Interfaces that are not in a redundancy group can still forward traffic, but no redundancy is available for them.

D. Only interfaces that have redundancy can be active in the JSRP cluster.

A. a host-inbound-traffic section for each logical interface

B. a security zone for each logical interface

C. family inet on each logical interface

D. a routing instance for each logical interface

A. syn-fin, syn-ack-ack-proxy, and tcp-no-frag

B. syn-fin, fin-no-ack, and tcp-no-frag

C. syn-fin, syn-flood, and tcp-no-frag

D. syn-fin, port-scan, and tcp-no-flag