Juniper SEC,Specialist(JNCIS-SEC) 認定 JN0-331 試験問題:

1. Which two external authentication server types are supported by JUNOS Software for firewall user authentication? (Choose two.)

A) RADIUS
B) TACACS+
C) IIS
D) LDAP

2. Which two statements about the use of SCREEN options are correct? (Choose two.)

A) When you deploy SCREEN options, you must take special care to protect OSPF.
B) SCREEN options are deployed at the ingress and egress sides of a packet flow.
C) SCREEN options offer protection against various attacks.
D) SCREEN options are deployed prior to route and policy processing in first path packet processing.

3. Which statement is true about interface-based source NAT?

A) It requires you to configure address entries in the junos-nat zone.
B) It requires you to configure address entries in the junos-global zone.
C) The IP addresses being translated must be in the same subnet as the egress interface.
D) PAT is a requirement.

4. Which IDP policy action drops a packet before it can reach its destination, but does not close the connection?

A) drop-packet
B) discard-traffic
C) drop-traffic
D) discard-packet

5. Which two statements about the Diffie-Hellman (DH) key exchange process are correct? (Choose two.)

A) In the DH key exchange process, the session key is never passed across the network.
B) In the DH key exchange process, the public and private keys are not mathematically related, ensuring higher security.
C) In the DH key exchange process, the session key is passed across the network to the peer for confirmation.
D) In the DH key exchange process, the public and private keys are mathematically related using the DH algorithm.

質問と回答：