JN0-330 Exam Training Practice Tests (Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES))]

Question 1

What are three main phases of an attack? (Choose three.)

A. reconnaissance B. propagation C. DoS D. port scanning E. exploit

Correct Answer: A,B,E

Question 2

Click the Exhibit button.
All system services have been enabled.
Given the configuration shown in the exhibit, which interface allows both ping and SSH traffic?

A. ge-0/0/1.0 B. ge-0/0/2.0 C. ge-0/0/0.0 D. ge-0/0/3.0

Correct Answer: C

Question 3

Which three parameters are configured in the IKE policy? (Choose three.)

A. dead peer detection settings B. external interface C. preshared key D. mode E. security proposals

Correct Answer: C,D,E

Question 4

Using a policy with the policy-rematch flag enabled, what happens to the existing and new sessions when you change the policy action from permit to deny?

A. The new sessions matching the policy are denied. The existing sessions, not being allowed to carry any traffic, simply timeout. B. The new sessions matching the policy are denied. The existing sessions are dropped. C. The new sessions matching the policy are denied. The existing sessions continue until they are completed or their timeout is reached. D. The new sessions matching the policy might be allowed through if they match another policy. The existing sessions are dropped.

Correct Answer: B

Question 5

Which statement is correct?

A. Propagation attacks focus on suspicious packet formation using the DoS SYN-ACK- ACK proxy flood. B. DoS attacks are directed at the network protection devices, while propagation attacks are directed at the servers. C. Both DoS and propagation attacks exploit and take control of all unprotected network devices. D. DoS attacks are exploits in nature, while propagation attacks use trust relationships to take control of the devices.

Correct Answer: D

Question 6

Click the Exhibit button.
In the exhibit, a host attached to interface ge-0/0/0.0 sends a SYN packet to open a Telnet connection to the router's ge-0/0/1.0 IP address.
What does the router do?

A. The router sends back a TCP reset. B. The router forwards the packet out the ge-0/0/1.0 interface. C. The router responds with a TCP SYN/ACK and opens the connection. D. The router silently discards the packet.

Correct Answer: D

Question 7

Which two functions of JUNOS software with enhanced services are handled by the real- time domain? (Choose two.)

A. SCREEN options B. SNMP C. OSPF D. NAT

Correct Answer: A,D

Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES) - JN0-330 Exam Practice Test