[2026] Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC)

문제1

Which statement is true when express AV detects a virus in a TCP session?

A. AV scanning is restarted.

B. A TCP RST is sent and the session is restarted.

C. The TCP connection is closed gracefully and the data content is dropped.

D. TCP traffic is allowed and an SNMP trap is sent.

정답: C

문제2

Which security or functional zone name has special significance to the Junos OS?

A. trust

B. self

C. junos-global

D. untrust

정답: C

문제3

Which two criteria does the enhanced Web filtering solution use to make decisions? (Choose two.)

A. results of antivirus scan

B. site reputation

C. category

D. keyword in the document

정답: B,C

문제4

Which three features are part of the branch SRX series UTM suite? (Choose three.)

A. antispam

B. IPS

C. application firewalling

D. antivirus

E. Web filtering

정답: A,D,E

문제5

Click the Exhibit button.
-- Exhibit -
[edit security policies from-zone HR to-zone trust]
user@host# show
policy two {
match {
source-address subnet_a;
destination-address host_b;
application [ junos-telnet junos-ping ];
}
then {
reject;
}
}
policy one {
match {
source-address host_a;
destination-address subnet_b;
application any;
}
then {
permit;
}
}
-- Exhibit --
host_a is in subnet_a and host_b is in subnet_b.
Given the configuration shown in the exhibit, which two statements are true about traffic from host_a to host_b (Choose two.)?

A. SMTP traffic is denied.

B. Telnet traffic is denied.

C. Ping traffic is denied.

D. DNS traffic is denied.

정답: B,C

문제6

The Junos OS blocks an HTTP request due to a Websense server response. Which form of Web filtering is being used?

A. local Web filtering

B. categorized Web filtering

C. redirect Web filtering

D. integrated Web filtering

정답: C

문제7

Which two statements are true concerning policy-based IPsec VPNs on an SRX Series device? (Choose two)

A. A new tunnel is set up before a flow of traffic matches the policy.

B. A new tunnel is set up only when a flow of traffic matches the policy.

C. One tunnel is set up for all flows of traffic that match the policy.

D. A new tunnel is set up for each flow of traffic that matches the policy.

정답: B,C

문제8

When using chassis clustering, which action is taken by the Junos OS if the control link or the fabric link suffers a loss of keepalives or heartbeat messages?

A. The primary node fails over and is placed in a disabled state.

B. Both nodes become primary.

C. Both nodes are placed in a disabled state.

D. The secondary node is placed in a disabled state.

정답: D

문제9

Two VPN peers are negotiating IKE phase 1 using main mode. Which message pair in the negotiation contains the phase 1 proposal for the peers?

A. message 5 and 6

B. message 1 and 2

C. message 7 and 8

D. message 3 and 4

정답: B

문제10

You want to protect against attacks on interfaces in ZoneA. You create a Junos Screen option called no-flood and commit the configuration. In the weeks that follow, the Screen does not appear to be working; whenever you enter the command show security screen statistics zone ZoneA, all counters show 0.
What would solve this problem?

A. [edit security zones] user@host# set screen no-flood

B. user@host> clear security screen statistics zone ZoneA

C. user@host> clear security screen no-flood statistics

D. [edit security zones security-zone ZoneA] user@host# set screen no-flood

정답: D

문제11

Which two statements about the use of SCREEN options are correct? (Choose two.)

A. SCREEN options are deployed at the ingress and egress sides of a packet flow.

B. Although SCREEN options are very useful, their use can result in more session creation.

C. SCREEN options examine traffic prior to policy processing, thereby resulting in fewer resources used for malicious packet processing.

D. SCREEN options offer protection against various attacks at the ingress zone of a packet flow.

정답: C,D

문제12

Which statement is true regarding NAT?

A. NAT is processed in the data plane.

B. NAT is not supported on SRX Series devices.

C. NAT requires special hardware on SRX Series devices.

D. NAT is processed in the control plane.

정답: A

문제13

You are required to configure a SCREEN option that enables IP source route option detection. Which two configurations meet this requirement? (Choose two.)

A. [edit security screen]
user@host# show
ids-option protectFromFlood {
ip {
source-route-option;
}
}

B. [edit security screen]
user@host# show
ids-option protectFromFlood {
ip {
loose-source-route-option;
strict-source-route-option;
}
}

C. [edit security screen]
user@host# show
ids-option protectFromFlood {
ip {
strict-source-route-option;
record-route-option;
}
}

D. [edit security screen]
user@host# show
ids-option protectFromFlood {
ip {
record-route-option;
security-option;
}
}

정답: A,B

문제14

Which command shows the event and traceoptions file for chassis clusters?

A. show log messages

B. show log chassisd

C. show log clusterd

D. show log jsrpd

정답: D

Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC) - JN0-332무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트