Free Juniper JN0-331 Exam Dumps Questions & Answers

Which statement describes the behavior of a security policy?

• A.  Traffic destined to the device's incoming interface does not require a security policy.
• B.  The implicit default security policy permits all traffic.
• C.  The factory-default configuration permits all traffic from all interfaces.
• D.  Traffic destined to the device itself always requires a security policy.

Which two functions of JUNOS Software are handled by the data plane? (Choose two.)

• A.  SNMP
• B.  OSPF
• C.  SCREEN options
• D.  NAT

Regarding secure tunnel (st) interfaces, which statement is true?

• A.  You cannot apply static NAT on an st interface logical unit.
• B.  A static route can reference the st interface logical unit as the next-hop.
• C.  st interfaces are optional when configuring a route-based VPN.
• D.  You cannot assign st interfaces to a security zone.

Click the Exhibit button.
[edit security policies from-zone trust to-zone untrust]
user@host# show
policy tunnel-traffic {
match {
source-address local-net;
destination-address remote-net;
application any;
then {
permit;
}}
You need to alter the security policy shown in the exhibit to send matching traffic to an IPsec
VPN tunnel. Which command causes traffic to be sent through an IPsec VPN named remotevpn?

• A.  [edit security policies from-zone trust to-zone untrust]
  user@host# set policy tunnel-traffic then tunnel remote-vpn
• B.  [edit security policies from-zone trust to-zone untrust]
  user@host# set policy tunnel-traffic then tunnel ipsec-vpn remote-vpn
• C.  [edit security policies from-zone trust to-zone untrust]
  user@host# set policy tunnel-traffic then permit ipsec-vpn remote-vpn
• D.  [edit security policies from-zone trust to-zone untrust]
  user@host# set policy tunnel-traffic then permit tunnel ipsec-vpn remote-vpn

Click the Exhibit button.
[edit security policies from-zone HR to-zone trust]
user@host# show
policy two {
match {
source-address subnet_a;
destination-address host_b;
application [ junos-telnet junos-ping ];
}
then {
reject;
}} policy one {
match {
source-address host_a;
destination-address subnet_b;
application any;
}
then {
permit;
}}
host_a is in subnet_a and host_b is in subnet_b.
Given the configuration shown in the exhibit, which statement is true about traffic from host_a
to host_b?

• A.  Ping traffic is permitted.
• B.  Telnet traffic is denied.
• C.  SMTP traffic is denied.
• D.  DNS traffic is denied.