JN0-330 무료 덤프문제 온라인 액세스

You must configure a SCREEN option that would protect your router from a session table flood.
Which configuration meets this requirement?

• A.[edit security screen]
  user@hostl# show
  ids-option protectFromFlood {
  tcp {
  syn-flood {
  attack-threshold 2000;
  destination-threshold 2000;
  }
• B.[edit security screen]
  user@hostl# show
  ids-option protectFromFlood {
  limit-session {
  source-ip-based 1200;
  destination-ip-based 1200;
  }
• C.[edit security screen]
  user@hostl# show
  ids-option protectFromFlood {
  icmp {
  ip-sweep threshold 5000;
  flood threshold 2000;
  }
• D.[edit security screen]
  user@hostl# show
  ids-option protectFromFlood {
  udp {
  flood threshold 5000;
  }

Which definition of autonomous system boundary router (ASBR) is correct?

• A.ASBR is the router on the boundary between the backbone and a not-so-stubby area.
• B.ASBR is any router that runs BGP.
• C.ASBR is the router on the boundary between the OSPF routing domain and the other static or dynamic routing protocols.
• D.ASBR is the router on the boundary between the two OSPF areas.

What are two uses of NAT? (Choose two.)

• A.conserving public IP addresses
• B.preventing unauthorized connections from outside the network
• C.allowing networks with overlapping private address space to communicate
• D.allowing stateful packet inspection

Which statement is true about interface-based static NAT?

• A.It requires you to configure address entries in the junos-nat zone.
• B.It requires you to configure address entries in the junos-global zone.
• C.It also supports PAT.
• D.The IP addresses being translated must be in the same subnet as the incoming interface.

Which two configurations are valid? (Choose two.)

• A.[edit security zones]
  user@host# show
  security-zone foo {
  interfaces {
  ge-0/0/1.0;
  ge-0/0/2.0;
  }
  security-zone bar {
  interfaces {
  ge-0/0/1.0;
  ge-0/0/3.0;
  }
• B.[edit security zones]
  user@host# show
  security-zone foo {
  interfaces {
  ge-0/0/1.0;
  ge-0/0/3.0;
  }
  security-zone bar {
  interfaces {
  ge-0/0/2.0;
  ge-0/0/3.102;
  }
• C.[edit routing-instances]
  foo {
  interface ge-0/0/3.0;
  interface ge-0/0/2.102;
  }
  bar {
  interface ge-0/0/0.0;
  interface ge-0/0/3.0;
  }
• D.[edit routing-instances]
  user@host# show
  foo {
  interface ge-0/0/3.0;
  interface ge-0/0/2.102;
  }
  bar {
  interface ge-0/0/0.0;
  interface ge-0/0/3.0;
  }