Online Access Free JN0-330 Practice Test

Which two statements about the Diffie-Hellman (DH) key exchange process are correct?
(Choose two.)

• A.In the DH key exchange process, the public and private keys are mathematically related using the DH algorithm.
• B.In the DH key exchange process, the public and private keys are not mathematically related, ensuring higher security.
• C.In the DH key exchange process, the session key is passed across the network to the peer for confirmation.
• D.In the DH key exchange process, the session key is never passed across the network.

Regarding a route-based versus policy-based IPSec VPN, which statement is true?

• A.A route-based VPN uses a policy referencing the IPSec VPN; a policy-based VPN policy does not use a policy referencing the IPSec VPN.
• B.A route-based VPN cannot have a deny action in a policy; a policy-based VPN can have a deny action.
• C.A route-based VPN is better suited for dialup or remote access VPNs compared to a policy-based VPN.
• D.A route-based VPN generally uses less resources than a policy-based VPN.

Which three methods are supported for authenticating user access to the command line interface (CLI)? (Choose three.)

• A.TACACS+
• B.Active Directory
• C.local database
• D.LDAP
• E.RADIUS

Click the Exhibit button.
A host attached to interface ge-0/0/0.0 has an open Telnet session to a host attached to interface ge-0/0/3.0. After the session times out of the router's session table, the host attached to interface ge-0/0/0.0 sends another data packet through the existing TCP session.
What will occur?

• A.The router will send a TCP reset to the host attached to interface ge-0/0/0.0.
• B.The router will forward the packet out the ge-0/0/3.0 interface.
• C.The router will silently discard the packet.
• D.The router will send a TCP reset to the host attached to interface ge-0/0/3.0.

Which three security concerns can be addressed by a tunnel mode IPSec VPN secured by AH? (Choose three.)

• A.data confidentiality
• B.outer IP header authentication
• C.data authentication
• D.outer IP header confidentiality
• E.data integrity