Juniper SEC,Specialist(JNCIS-SEC) Sample Questions:

1. Click the Exhibit button.
[edit chassis]
user@host# show
cluster {
reth-count 3;
redundancy-group 1 {
node 0 priority 1;
node 1 priority 100;
}}
When applying the configuration in the exhibit and initializing a chassis cluster, which
statement is correct?

A) Three physical interfaces are redundant.
B) You must define an additional redundancy group.
C) You must issue an operational command and reboot the system for the above configuration to take effect.
D) node 0 will immediately become primary for redundancy group 1.

2. Click the Exhibit button.
[edit security policies from-zone HR to-zone trust]
user@host# show
policy two {
match {
source-address subnet_a;
destination-address host_b;
application [ junos-telnet junos-ping ];
}
then {
reject;
}} policy one {
match {
source-address host_a;
destination-address subnet_b;
application any;
}
then {
permit;
}}
host_a is in subnet_a and host_b is in subnet_b.
Given the configuration shown in the exhibit, which statement is true about traffic from host_a
to host_b?

A) DNS traffic is denied.
B) SMTP traffic is denied.
C) Ping traffic is permitted.
D) Telnet traffic is denied.

3. Which two statements are true regarding redundancy groups? (Choose two.)

A) When priority settings are equal and the members participating in a cluster are initialized at the same time, the primary role for redundancy group 0 is assigned to node 0.
B) The primary role can be shared for redundancy group 0 when the active-active option is enabled.
C) Redundancy group 0 manages the control plane failover between the nodes of a cluster.
D) The preempt option determines the primary and secondary roles for redundancy group 0 during a failure and recovery scenario.

4. You want to create an out-of-band management zone and assign the ge-0/0/0.0 interface
to that zone.
From the [edit] hierarchy, which command do you use to configure this assignment?

A) set security zones management interfaces ge-0/0/0.0
B) set zones functional-zone management interfaces ge-0/0/0.0
C) set security zones functional-zone management interfaces ge-0/0/0.0
D) set security zones functional-zone out-of-band interfaces ge-0/0/0.0

5. A route-based VPN is required for which scenario?

A) when the remote VPN peer is behind a NAT device
B) when a dynamic routing protocol is required across the VPN and GRE cannot be used
C) when multiple networks need to be reached across the tunnel and GRE cannot be used
D) when the remote VPN peer is a dialup or remote access client

Solutions: