[2026] Juniper SEC,Specialist(JNCIS-SEC) - JN0-331 무료 시험 문제

문제1

Which attribute is optional for IKE phase 2 negotiations?

A. security protocol (ESP or AH)

B. proxy-ID

C. Diffie-Hellman group key

D. phase 2 proposal

정답: C

문제2

Users can define policy to control traffic flow between which two components? (Choose two.)

A. from a zone to a different zone

B. from a zone to the device itself

C. from a zone to the same zone

D. from one interface to another interface

정답: A,C

문제3

Click the Exhibit button.
[edit security policies from-zone HR to-zone trust]
user@host# show
policy two {
match {
source-address subnet_a;
destination-address host_b;
application [ junos-telnet junos-ping ];
}
then {
reject;
}} policy one {
match {
source-address host_a;
destination-address subnet_b;
application any;
}
then {
permit;
}}
host_a is in subnet_a and host_b is in subnet_b.
Given the configuration shown in the exhibit, which statement is true about traffic from host_a
to host_b?

A. Ping traffic is permitted.

B. SMTP traffic is denied.

C. Telnet traffic is denied.

D. DNS traffic is denied.

정답: C

문제4

Which two statements regarding asymmetric key encryption are true? (Choose two.)

A. An attacker can decrypt data if the attacker captures the key used for encryption.

B. It uses two keys: one for encryption and a different key for decryption.

C. It is commonly used to create digital certificate signatures.

D. The same key is used for encryption and decryption.

정답: C,D

문제5

Which two statements describe the difference between JUNOS Software for security platforms and a traditional router? (Choose two.)

A. JUNOS Software for security platforms secures traffic by default; a traditional router does not secure traffic by default.

B. JUNOS Software for security platforms allows for session-based forwarding; a traditional router uses packet-based forwarding.

C. JUNOS Software for security platforms separates broadcast domains; a traditional router does not separate broadcast domains.

D. JUNOS Software for security platforms supports NAT and PAT; a traditional router does not support NAT or PAT.

정답: A,B

문제6

Click the Exhibit button.
[edit security zones security-zone HR]
user@host# show
host-inbound-traffic {
system-services {
ping;
ssh;
https;
}}
interfaces {
ge-0/0/0.0;
ge-0/0/1.0 {
host-inbound-traffic {
system-services {
ping;
}}}
ge-0/0/2.0 {
host-inbound-traffic {
system-services {
ping;
ftp;
}}}
ge-0/0/3.0 {
host-inbound-traffic {
system-services {
all;
ssh {
except;
}}}
}}
All system services have been enabled.
Given the configuration shown in the exhibit, which interface allows both ping and SSH traffic?

A. ge-0/0/2.0

B. ge-0/0/1.0

C. ge-0/0/3.0

D. ge-0/0/0.0

정답: D

문제7

A network administrator wants to permit Telnet traffic initiated from the address book entry
the10net in a zone called UNTRUST to the address book entry Server in a zone called TRUST.
However, the administrator does not want the server to be able to initiate any type of traffic
from the TRUST zone to the UNTRUST zone.
Which configuration would correctly accomplish this task?

A. from-zone TRUST to-zone UNTRUST {
policy DenyServer {
match {
source-address Server;
destination-address any;
application any;
}
then {
permit;
}}}
from-zone UNTRUST to-zone TRUST {
policy AllowTelnetin {
match {
source-address the10net;
destination-address Server;
application junos-telnet;
} then { permit; }}}

B. from-zone UNTRUST to-zone TRUST {
policy AllowTelnetin {
match {
source-address the10net;
destination-address Server;
application junos-ftp;
}
then {
permit;
}}}

C. from-zone UNTRUST to-zone TRUST {
policy DenyServer {
match {
source-address any;
destination-address any;
application any;
}
then {
deny;
}}}
from-zone TRUST to-zone UNTRUST {
policy AllowTelnetin {
match {
source-address the10net;
destination-address Server;
application junos-telnet;
}
then {
permit;
}}}

D. from-zone TRUST to-zone UNTRUST {
policy DenyServer {
match {
source-address Server;
destination-address any;
application any;
}
then {
deny;
}
}}
from-zone UNTRUST to-zone TRUST {
policy AllowTelnetin {
match {
source-address the10net;
destination-address Server;
application junos-telnet;
}
then {
permit;
}}}

정답: D

Juniper SEC,Specialist(JNCIS-SEC) - JN0-331무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트