Free Juniper JN0-332 Exam Dumps Questions & Answers

Which configuration shows the correct application of a security policy scheduler?

• A.  [edit security policies from-zone Private to-zone External]
  user@host# show
  policy allowTransit {
  match {
  source-address PrivateHosts;
  destination-address ExtServers;
  application ExtApps;
  scheduler-name now;
  }
  then {
  permit {
  tunnel {
  ipsec-vpn myTunnel;
  }
  }
  }
  scheduler-name now;
  }
• B.  [edit security policies from-zone Private to-zone External]
  user@host# show
  policy allowTransit {
  match {
  source-address PrivateHosts;
  destination-address ExtServers;
  application ExtApps;
  }
  then {
  permit {
  tunnel {
  ipsec-vpn myTunnel;
  }
  scheduler-name now;
  }
  }
  }
• C.  [edit security policies from-zone Private to-zone External]
  user@host# show
  policy allowTransit {
  match {
  source-address PrivateHosts;
  destination-address ExtServers;
  application ExtApps;
  }
  then {
  permit {
  tunnel {
  ipsec-vpn myTunnel;
  scheduler-name now;
  }
  }
  }
  }
• D.  [edit security policies from-zone Private to-zone External]
  user@host# show
  policy allowTransit {
  match {
  source-address PrivateHosts;
  destination-address ExtServers;
  application ExtApps;
  }
  then {
  permit {
  tunnel {
  ipsec-vpn myTunnel;
  }
  }
  }
  scheduler-name now;
  }

Which two statements are true about route-based IPsec VPNs on an SRX Series device? (Choose two)

• A.  Route-based VPNs must use IKE aggressive mode.
• B.  An st0 interface must be bound to each VPN.
• C.  A security policy must permit the traffic.
• D.  New tunnels are generated with each new flow of traffic.

Which statement is true regarding NAT?

• A.  NAT is processed in the data plane.
• B.  NAT is not supported on SRX Series devices.
• C.  NAT requires special hardware on SRX Series devices.
• D.  NAT is processed in the control plane.

Which two statements regarding symmetric key encryption are true? (Choose two.)

• A.  The same key is used for encryption and decryption.
• B.  An attacker can decrypt data if the attacker captures the key used for encryption.
• C.  It uses two keys: one for encryption and a different key for decryption.
• D.  It is commonly used to create digital certificate signatures.

Which feature on the SRX Series device would be processed first for transit traffic?

• A.  Zone
• B.  Security policies
• C.  NAT
• D.  Screens