Free Juniper JN0-332 Exam Dumps Questions & Answers

A policy-based IPsec VPN is ideal for which scenario?

• A.  when you want to conserve tunnel resources
• B.  when a dynamic routing protocol such as OSPF must be sent across the VPN
• C.  when you want to configure a tunnel policy with an action of deny
• D.  when the remote peer is a dialup or remote access client

Referring to the exhibit, which two statements are correct about IPsec configuration? (choose two)

• A.  Protocol AH is used
• B.  IKE Phase 2 establishes immediately
• C.  IKE Phase 2 establishes when payload traffic flows
• D.  Protocol ESP is used

Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

• A.  Scheduler
• B.  pass-through authentication
• C.  Counters
• D.  ALGs

Which two statements are true regarding firewall user authentication? (Choose two.)

• A.  Firewall user authentication is performed only for traffic that is accepted by a security policy.
• B.  Firewall user authentication provides an additional method of controlling user access to remote networks.
• C.  Firewall user authentication is performed only for traffic that is denied by a security policy.
• D.  Firewall user authentication provides an additional method of controlling user access to the JUNOS security device itself.

Which configuration keyword ensures that all in-progress sessions are re-evaluated upon committing a security policy change?

• A.  rematch-policy
• B.  evaluate-policy
• C.  policy-rematch
• D.  policy-evaluate