JN0-330 题目列表
单选题Which parameters must you select when configuring operating system probes SCREEN options?（）Asyn-fin, syn-flood, and tcp-no-fragBsyn-fin, port-scan, and tcp-no-flagCsyn-fin, fin-no-ack, and tcp-no-fragDsyn-fin, syn-ack-ack-proxy, and tcp-no-frag
单选题A traditional router is better suited than a firewall device for which function? （）AVPN establishmentBpacket-based forwardingCstateful packet processingDnetwork address translation
单选题Interface ge-0/0/2.0 of your router is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A host with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. This host isattached to the ge-0/0/0.0 interface of your router. You must use interface-based static NAT to make the HTTP service on the host reachable from the Internet. On which IP address and TCP port can Internet hosts reach the HTTP service?（）AIP address 10.10.10.1 and TCP port 8080BIP address 71.33.252.17 and TCP port 80CIP address 71.33.251.19 and TCP port 80DIP address 71.33.252.19 and TCP port 8080
多选题Which two statements regarding asymmetric key encryption are true?（） (Choose two.)AThe same key is used for encryption and decryption.BIt is commonly used to create digital certificate signatures.CIt uses two keys: one for encryption and a different key for decryption.DAn attacker can decrypt data if the attacker captures the key used for encryption.
多选题Which three parameters are configured in the IKE policy?（） (Choose three.)AmodeBpreshared keyCexternal interfaceDsecurity proposalsEdead peer detection settings
多选题In JUNOS software with enhanced services, which three packet elements are inspected to determineif a session already exists? （）(Choose three.)AIP protocolBIP time-to-liveCsource and destination IP addressDsource and destination MAC addressEsource and destination TCP/UDP port
单选题Click the Exhibit button. In the exhibit, what is the priority for Router B in VRRP group 100?（）A 1B 100C 110D 255
单选题Click the Exhibit button. In the exhibit, which statement is correct? （）A Three physical interfaces are redundant.B You must define an additional Redundancy Group.C node 0 will immediately become primary in the cluster.D You must issue an operational command and reboot the system for the above configuration to take effect.
多选题Which three parameters are configured in the IKE policy?（） (Choose three.)AmodeBpreshared keyCexternal interfaceDsecurity proposalsEdead peer detection settings
单选题Click the Exhibit button. In the exhibit, what is the priority for Router B in VRRP group 100?（）A 1B 100C 110D 255
单选题Click the Exhibit button. Based on the exhibit, client PC 192.168.10.10 cannot ping 1.1.1.2. Which is a potential cause for this problem?（）A The untrust zone does not have a management policy configured.B The trust zone does not have ping enabled as host-inbound-traffic service.C The security policy from the trust zone to the untrust zone does not permit ping.D No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.
单选题You are not able to telnet to the interface IP of your JUNOS software with enhanced services devicefrom a PC on the same subnet. What is causing the problem? （）ATelnet is not being permitted by self policy.BTelnet is not being permitted by security policy.CTelnet is not allowed because it is not considered secure.DTelnet is not enabled as a host-inbound service on the zone.
单选题Which statement is true about interface-based static NAT? （）AIt also supports PAT.BIt requires you to configure address entries in the junos-nat zone.CIt requires you to configure address entries in the junos-global zone.DThe IP addresses being translated must be in the same subnet as the incoming interface.
单选题Click the Exhibit button. Which type of source NAT is configured in the exhibit?（）A static source poolB interface source poolC source pool with PATD souce pool without PAT
单选题Click the Exhibit button. Which type of source NAT is configured in the exhibit?（）A static source poolB interface source poolC source pool with PATD souce pool without PAT