Free Juniper JN0-330 Exam Dumps Questions & Answers

Which three methods of source NAT does the JUNOS software with enhanced services support? (Choose three.)

• A.  interface-based source NAT
• B.  interface-based source NAT without PAT
• C.  source NAT with overflow pool
• D.  source NAT using static source pool
• E.  source NAT with static source pool and PAT

Regarding a route-based versus policy-based IPSec VPN, which statement is true?

• A.  A route-based VPN uses a policy referencing the IPSec VPN; a policy-based VPN policy does not use a policy referencing the IPSec VPN.
• B.  A route-based VPN cannot have a deny action in a policy; a policy-based VPN can have a deny action.
• C.  A route-based VPN is better suited for dialup or remote access VPNs compared to a policy-based VPN.
• D.  A route-based VPN generally uses less resources than a policy-based VPN.

You want to create a policy allowing traffic from any host in the Trust zone to hostb.example.com (172.19.1.1) in the Untrust zone. How do you do create this policy?

• A.  Specify the IP address (172.19.1.1/32) as the destination address in the policy.
• B.  Create an address book entry in the Untrust zone for the 172.19.1.1/32 prefix and reference this entry in the policy.
• C.  Specify the DNS entry (hostb.example.com.) as the destination address in the policy.
• D.  Create an address book entry in the Trust zone for the 172.19.1.1/32 prefix and reference this entry in the policy.

Click the Exhibit button.
Based on the exhibit, client PC 192.168.10.10 cannot ping 1.1.1.2.
Which is a potential cause for this problem?

• A.  No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.
• B.  The untrust zone does not have a management policy configured.
• C.  The trust zone does not have ping enabled as host-inbound-traffic service.
• D.  The security policy from the trust zone to the untrust zone does not permit ping.

Using a policy with the policy-rematch flag enabled, what happens to the existing and new sessions when you change the policy action from permit to deny?

• A.  The new sessions matching the policy are denied. The existing sessions are dropped.
• B.  The new sessions matching the policy might be allowed through if they match another policy. The existing sessions are dropped.
• C.  The new sessions matching the policy are denied. The existing sessions, not being allowed to carry any traffic, simply timeout.
• D.  The new sessions matching the policy are denied. The existing sessions continue until they are completed or their timeout is reached.