JN0-533 Exam - Free Juniper Questions and Answers

Question #11 (Topic: )

Click the Exhibit button.
[Juniper-JN0-533-6.0/Juniper-JN0-533-7_2.png]
You are setting up security policies to allow access to the servers on the 1.1.1.0/24 subnet.
Referring to the exhibit, which two host addresses will be able to access the Web servers
using FTP? (Choose two.)

A. 10.1.3.5 B. 10.1.2.1 C. 10.1.2.13 D. 10.1.1.1

Answer: A,C

Question #12 (Topic: )

Click the Exhibit button.
[Juniper-JN0-533-6.0/Juniper-JN0-533-8_2.png]
Given the policy and address information for the three hosts shown in the exhibit, which
two statements are correct? (Choose two.)

A. HTTP traffic from HostC to HostA will be silently discarded. B. HTTP traffic from HostC to HostA will result in a RST sent to HostC. C. HTTP traffic from HostA to HostB will be allowed. D. HTTP traffic from HostA to HostB will be rejected.

Answer: B,C

Question #13 (Topic: )

Which dynamic routing protocol does IPv6 use?

A. RIP B. RIPng C. OSPFv2 D. NHRP

Answer: B

Question #14 (Topic: )

You are receiving 3000 SYN packets per second from multiple outside sources to the same
destination IP address in your network. You want the SYN proxy Screen option to engage
when SYN packets exceed 2000 per second, but the SYN proxy is not engaging.
What is causing the problem?

A. The SYN packets are being sent to multiple destination ports. B. The alarm threshold is too high. C. The destination threshold is too high. D. The option to only generate alarms without dropping packets is set to ON.

Answer: A

Question #15 (Topic: )

-- Exhibit --
ssg20-> set address "Trust" "192.168.1.0/32" 10.20.1.0 255.255.255.0
ssg20-> set address "Untrust" "10.204.1.0/24" 10.204.1.0 255.255.255.0
ssg20-> set address "Untrust" "192.168.1.0/24" 192.168.1.0 255.255.255.255
ssg20-> get policy id 1
name:"none" (id 1), zone Trust -> Untrust,action Permit, status "enabled"
src "192.168.1.0/32", dst "192.168.1.0/24", serv "FTP"
Rules on this VPN policy: 0
nat off, Web filtering : disabled
vpn unknown vpn, policy flag 00000000, session backup: on, idle reset: on
traffic shaping off, scheduler n/a, serv flag 00
log no, log count 0, alert no, counter no(0) byte rate(sec/min) 0/0
total octets 0, counter(session/packet/octet) 0/0/0
priority 7, diffserv marking Off
tadapter: state off, gbw/mbw 0/0 policing (no)
No Authentication
No User, User Group or Group expression set
-- Exhibit --
FTP connections from host 10.20.1.10 to server 192.168.1.100 are not working. You
produce the output shown in the exhibit.What is causing the traffic problem?

A. The policy's source address is incorrect. B. The policy's destination address is incorrect. C. The policy's service is incorrect. D. The policy does not have the FTP ALG enabled.

Answer: B

Juniper JN0-533 - FWV, Specialist (JNCIS-FWV) Exam