Online Access Free JN0-331 Practice Test

You have been tasked with performing an update to the IDP attack database. Which three requirements are included as part of this task? (Choose three.)

• A.You must be logged in as the root user.
• B.The device must be rebooted to complete the update.
• C.The device must be connected to a network.
• D.An IDP license must be installed on your device.
• E.The IDP security package must be installed after it is downloaded.

Under which configuration hierarchy is an access profile configured for firewall user authentication?

• A.[edit firewall access]
• B.[edit access]
• C.[edit security access]
• D.[edit firewall-authentication]

Click the Exhibit button.
[edit security policies]
user@host# show
from-zone trust to-zone untrust {
policy AllowHTTP{
match {
source-address HOSTA;
destination-address any;
application junos-ftp;
}
then {
permit;
}}
policy AllowHTTP2{
match {
source-address any;
destination-address HOSTA;
application junos-http;
}
then {
permit;
}}
policy AllowHTTP3{
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}}}
A flow of HTTP traffic needs to go from HOSTA to HOSTB. Assume that traffic will initiate from
HOSTA and that HOSTA is in zone trust and HOSTB is in zone untrust.
What will happen to the traffic given the configuration in the exhibit?

• A.The traffic will be permitted by policy AllowHTTP.
• B.The traffic will be permitted by policy AllowHTTP3.
• C.The traffic will be permitted by policy AllowHTTP2.
• D.The traffic will be dropped as no policy match will be found.

What are two uses of NAT? (Choose two.)

• A.preventing unauthorized connections from outside the network
• B.allowing stateful packet inspection
• C.allowing networks with overlapping private address space to communicate
• D.conserving public IP addresses

Prior to applying SCREEN options to drop traffic, you want to determine how your configuration
will affect traffic.
Which mechanism would you configure to achieve this objective?

• A.the permit option for the particular SCREEN option
• B.the alarm-without-drop option for the particular SCREEN option
• C.the log option for the particular SCREEN option
• D.the SCREEN option, because it does not drop traffic by default