《Juniper FWV Associate JNCIA-FWV JN0-521题库》.pdfVIP

Juniper JN0-521 JN0-521 Juniper Networks Certified Internet Associate, FWV (JNCIA-FWV) Practice Test Version 1.1 买题库 QQ:860424807 Juniper JN0-521: Practice Exam QUESTION NO: 1 A ScreenOS firewall has the correct interfaces addressed and active. A policy is written allowing interzone FTP traffic from a directly connected client. But the traffic does not cross the firewall from the client to the server. What is the most likely problem with the firewall? A. The ScreenOS firewall has no physical connection to the FTP server. B. The ALG option on the ScreenOS firewall has not been enabled for FTP traffic. C. The ScreenOS firewall does not have a route defined to the FTP servers subnet. D. The ScreenOS firewall does not have a route defined to the FTP clients subnet. Answer: C QUESTION NO: 2 Click the Exhibit button. In the exhibit, why is the packet dropped? A. interface down B. route not configured C. policy not configured D. denied by policy 1005 Answer: C QUESTION NO: 3 Which three options allow proper configuration of NAT-dst? (Choose three.) A. the default address book entry of any in the internal zone B. the default address book entry of any in the external zone 买题库 QQ:860424807 2 Juniper JN0-521: Practice Exam C. a secondary address on one of the interfaces in the internal zone D. an address book entry for the address to be translated in the internal zone E. a static route to the appropriate subnet using a private interface as the outbound interface Answer: C,D,E QUESTION NO: 4 Which two statements are true in regards to a ScreenOS firewall in transparent mode? (Choose two.) A. VPNs can terminate to the VLAN1 interface IP address B. Static routes must be configured if multiple vi