Online Access Free JN0-330 Exam Questions

Click the Exhibit button.
You are not able to telnet to 192.168.10.1 from client PC 192.168.10.10.
What is causing the problem?

• A.Telnet is not enabled as a host-inbound service on the zone.
• B.Telnet is not being permitted by security policy.
• C.Telnet is not being permitted by self policy.
• D.Telnet is not allowed because it is not considered secure.

In a JSRP cluster with two J6350 routers, the interface ge-7/0/0 belongs to which device?

• A.This interface belongs to NODE0 of the cluster.
• B.This interface is a system-created interface.
• C.This interface belongs to NODE1 of the cluster.
• D.This interface will not exist because J6350 routers have only six slots.

Your task is to provision the router running JUNOS software with enhanced services to permit transit packets from the Private zone to the External zone by using an IPSec VPN and log information at the time of session close.
Which configuration meets this requirement?

• A.[edit security policies from-zone Private to-zone External]
  user@host# show
  policy allowTransit {
  match {
  source-address PrivateHosts;
  destination-address ExtServers;
  application ExtApps;
  }
  then {
  permit {
  tunnel {
  ipsec-vpn VPN;
  }
  log {
  session-close;
  }
• B.[edit security policies from-zone Private to-zone External]
  user@host# show
  policy allowTransit {
  match {
  source-address PrivateHosts;
  destination-address ExtServers;
  application ExtApps;
  }
  then {
  permit {
  tunnel {
  ipsec-vpn VPN;
  }
  count {
  session-close;
  }
• C.[edit security policies from-zone Private to-zone External]
  user@host# show
  policy allowTransit {
  match {
  source-address PrivateHosts;
  destination-address ExtServers;
  application ExtApps;
  }
  then {
  permit {
  tunnel {
  ipsec-vpn VPN;
  log;
  count session-close;
  }
• D.[edit security policies from-zone Private to-zone External]
  user@host# show
  policy allowTransit {
  match {
  source-address PrivateHosts;
  destination-address ExtServers;
  application ExtApps;
  }
  then {
  permit {
  tunnel {
  ipsec-vpn VPN;
  }
  log {
  session-init;
  }

Which command would you use to display input errors on the se-1/0/1 interface?

• A.user@host> show interfaces detail se-1/0/1
• B.user@host> show interfaces se-1/0/1 errors
• C.user@host> show interfaces se-1/0/1 extensive
• D.user@host> show interfaces se-1/0/1 detailed

Two VPN peers are negotiating IKE phase 1 using main mode. Which message pair in the negotiation contains the phase 1 proposal for the peers?

• A.message 5 and 6
• B.message 1 and 2
• C.message 7 and 8
• D.message 3 and 4