Online Access Free JN0-332 Exam Questions

Regarding zone types, which statement is true?

• A.Security zones must have a scheduler applied.
• B.You cannot assign an interface to a functional zone.
• C.You can specifiy a functional zone in a security policy.
• D.You can use a security zone for traffic destined for the device itself.

Click the Exhibit button.
-- Exhibit -
[edit security policies from-zone HR to-zone trust]
user@host# show
policy two {
match {
source-address subnet_a;
destination-address host_b;
application [ junos-telnet junos-ping ];
}
then {
reject;
}
}
policy one {
match {
source-address host_a;
destination-address subnet_b;
application any;
}
then {
permit;
}
}
-- Exhibit --
host_a is in subnet_a and host_b is in subnet_b.
Given the configuration shown in the exhibit, which two statements are true about traffic from host_a to host_b (Choose two.)?

• A.Ping traffic is denied.
• B.SMTP traffic is denied.
• C.DNS traffic is denied.
• D.Telnet traffic is denied.

You have packet loss on an IPsec VPN using the default maximum transmission unit (MTU) where the packets have the DF-bit (do not fragment) set.
Which configuration solves this problem?

• A.Set a reduced MSS value for VPN traffic under the [edit security flow tcp-mss] hierarchy.
• B.Set an increased MSS value on the st0 interface.
• C.Set a reduced MTU value for VPN traffic under the [edit security flow] hierarchy.
• D.Set an increased MTU value on the physical interface.

What are two functions of the junos-host zone? (Choose two.)

• A.storing global address book entries
• B.controlling self-generated traffic
• C.controlling global Junos Screen settings
• D.controlling host inbound traffic

What are three valid Juniper Networks IPS attack object types? (Choose three.)

• A.trojan
• B.virus
• C.signature
• D.anomaly
• E.chain