Free JN0-333 Security, Specialist (JNCIS-SEC) Exam Questions

1. Click the Exhibit button.


Host A is attempting to connect to Host B using the domain name, which is tied to a public IP address. All attempts to connect to Host B have failed. You have examined the configuration on your SRX340 and determined that a NAT policy is required.
Referring to the exhibit, which two NAT types will allow Host A to connect to Host B? (Choose two.)

2. Click the exhibit button.


Referring to the exhibit, which statement is true?

3. Which three elements does AH provide in an IPsec implementation? (Choose three.)

4. What is the correct ordering of Junos policy evaluation from first to last?

5. Click the Exhibit button.


A customer would like to monitor their VPN using dead peer detection.
Referring to the exhibit, for how many minutes was the peer down before the customer was notified?

6. Click the Exhibit button.


Referring to the exhibit, which action will be taken for traffic coming from the untrust zone going to the trust zone?

7. Click the Exhibit button.


Referring to the exhibit, which statement is true?

8. Click the exhibit button.


You are configuring security policies with Junos Space Security Director.
Referring to the exhibit, which two statements are true? (Choose two.)

9. Which process describes the implementation of screen options on an SRX Series device?

10. Which two statements are true when implementing source NAT on an SRX Series device? (Choose two.)

11. What are three defined zone types on an SRX Series device?

12. Which host-inbound-traffic security zone parameter would allow access to the REST API configured to listen on custom TCP port 5080?

13. A session token on an SRX Series device is derived from what information? (Choose two.)

14. You want to implement IPsec on your SRX Series devices, but you do not want to use a preshared key.
Which IPsec implementation should you use?

15. Your network includes IPsec tunnels. One IPsec tunnel transits an SRX Series device with NAT configured. You must ensure that the IPsec tunnels function properly.
Which statement is correct in this scenario?

16. You recently configured an IPsec VPN between two SRX Series devices. You notice that the Phase 1 negotiation succeeds and the Phase 2 negotiation fails.
Which two configuration parameters should you verify are correct? (Choose two.)

17. You are changing the default vCPU allocation on a vSRX.
How are the additional vCPUs allocated in this scenario?

18. Which action will restrict SSH access to an SRX Series device from a specific IP address which is connected to a security zone named trust?

19. Click the Exhibit button.


You notice that your SRX Series device is not blocking HTTP traffic as expected.
Referring to the exhibit, what should you do to solve the problem?

20. Your internal webserver uses port 8088 for inbound connections. You want to allow external HTTP traffic to connect to the webserver.
Which two actions would accomplish this task? (Choose two.)