最新なJuniper JN0-331問題集（131題）、真実試験の問題を全部にカバー！

質問 1：
Regarding an IPsec security association (SA), which two statements are true? (Choose two.)
A. IPsec SA is established during phase 2 negotiations.
B. IKE SA is bidirectional.
C. IPsec SA is bidirectional.
D. IKE SA is established during phase 2 negotiations.
正解：B,D

質問 2：
You are required to configure a SCREEN option that enables IP source route option
detection.
Which two configurations meet this requirement? (Choose two.)
A. [edit security screen]
user@host# show
ids-option protectFromFlood {
ip {
strict-source-route-option;
record-route-option;
}}
B. [edit security screen]
user@host# show
ids-option protectFromFlood {
ip {
loose-source-route-option;
strict-source-route-option;
}}
C. [edit security screen]
user@host# show
ids-option protectFromFlood {
ip {
source-route-option;
}}
D. [edit security screen]
user@host# show
ids-option protectFromFlood {
ip {
record-route-option;
security-option;
}}
正解：B,C

質問 3：
Click the Exhibit button.
user@host> show interfaces ge-0/0/0.0 | match host-inbound
Allowed host-inbound traffic : bgp ospf
Which configuration would result in the output shown in the exhibit?
A. [edit security zones security-zone trust]
user@host# show
host-inbound-traffic {
protocols {
bgp;
}}
interfaces {
all {
host-inbound-traffic {
protocols {
ospf;
}}}}
B. [edit security zones security-zone trust]
user@host# show
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
protocols {
ospf;
bgp;
}}}}
C. [edit security zones functional-zone management]
user@host# show
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
protocols {
bgp;
ospf;
vrrp;
}}}}
host-inbound-traffic {
protocols {
all;
vrrp {
except; }}}
D. [edit security zones functional-zone management]
user@host# show
host-inbound-traffic {
protocols {
bgp;
ospf;
}}
正解：B

質問 4：
Click the Exhibit button.
[edit schedulers]
user@host# show
scheduler now {
monday all-day;
tuesday exclude;
wednesday {
start-time 07:00:00 stop-time 18:00:00;
}
thursday {
start-time 07:00:00 stop-time 18:00:00;
}}
[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn myTunnel;
}}}
scheduler-name now;
Based on the configuration shown in the exhibit, what are the actions of the security policy?
A. The policy will always permit transit packets, but will only use the IPsec VPN myTunnel all day Monday and Wednesday 7am to 6pm, and Thursday 7am to 6pm.
B. The policy will permit transit packets and use the IPsec VPN myTunnel all day Monday and Wednesday 7am to 6pm, and Thursday 7am to 6pm.
C. The policy will permit transit packets only on Monday, and use the IPsec VPN Mytunnel.
D. The policy will always permit transit packets and use the IPsec VPN myTunnel.
正解：B

質問 5：
Click the Exhibit button.
[edit groups]
user@host# show
node0 {
system {
host-name NODE0;
}
interfaces {
fxp0 {
unit 0 {
family inet {
address 1.1.1.1/24;
}}}}}
node1 {
system {
host-name NODE1;
}
interfaces {
fxp0 {
unit 0 {
family inet {
address 1.1.1.2/24;
}}}}}
In the exhibit, what is the function of the configuration statements?
A. This section is where unique node configuration is applied.
B. This section is where you define all chassis clustering configuration.
C. You can apply this configuration in the chassis cluster to make configuration easier.
D. This configuration is required for members of a chassis cluster to talk to each other.
正解：A

質問 6：
Which IDP policy action closes the connection and sends an RST packet to both the client and the server?
A. close-connection
B. terminate-connection
C. terminate-session
D. close-client-and-server
正解：D