Online Access Free JN0-331 Practice Test

You want to create an out-of-band management zone and assign the ge-0/0/0.0 interface
to that zone.
From the [edit] hierarchy, which command do you use to configure this assignment?

• A.set security zones management interfaces ge-0/0/0.0
• B.set security zones functional-zone management interfaces ge-0/0/0.0
• C.set security zones functional-zone out-of-band interfaces ge-0/0/0.0
• D.set zones functional-zone management interfaces ge-0/0/0.0

Which two statements are true regarding high-availability chassis clustering? (Choose two.)

• A.Devices participating in a chassis cluster can be different models.
• B.Devices participating in a chassis cluster must be the same models.
• C.A chassis cluster consists of two or more devices.
• D.A chassis cluster consists of two devices.

What are three configuration objects used to build JUNOS IDP rules? (Choose three.)

• A.detect objects?
• B.zone objects
• C.policy objects
• D.attack objects
• E.application objects?

Which attribute is optional for IKE phase 2 negotiations?

• A.proxy-ID
• B.Diffie-Hellman group key
• C.phase 2 proposal
• D.security protocol (ESP or AH)

Which IDP policy action drops a packet before it can reach its destination, but does not close the connection?

• A.drop-packet
• B.discard-packet
• C.discard-traffic
• D.drop-traffic