Juniper JN0-520 Exam - Certifyme.com

Free JN0-520 Sample Questions:

1. What are two (2) benefits of configuring the NetScreen in transparent mode?
A. There is no need for IP addresses even for remote management
B. There is no need to reconfigure the IP addresses of routers or protected servers
C. There is no need to create Mapped or Virtual IPs for incoming traffic to reach protected servers
D. Policies are easier to create since you do not have to include Source and Destination IP addresses
E. The product can support more VPNs and obtain greater throughput because there is less overhead to manage
Answer: BC

2. Click the Exhibit button to view the exhibit.

If A initiates a Web browsing session with B, and the Trust interface of the 5XT is in NAT mode, what could be the source address/port of the packet arriving at host B?
A. 10.0.0.5/80
B. 10.0.0.5/1099
C. 10.0.0.1/1024
D. 20.0.0.1/1024
E. 1.1.1.250/1024
Answer: E

3. Which cannot be enabled when creating an Access Policy entry?
A. Setting the tcp-mss size
B. Applying NAT using DIP pools
C. Logging all connections that match the Access Policy
D. Triggering a traffic alarm if traffic goes above 300 Bytes/Sec
E. Scheduling the policy to take effect between Monday through Friday only
Answer: A

4. Which policy action is needed in order to add Deep Packet inspection to a policy?
A. IDP
B. Deny
C. Reject
D. Permit
E. Detect
Answer: D

5. You have one VIP configured on your device, using public address 191.111.222.5. When you configure the policy, what will you select for the VIP, and where will you select it?
A. VIP::1 in the NAT-dst public field
B. VIP::1 as the destination address
C. VIP(191.111.222.5) in the NAT-dst public field
D. VIP(191.111.222.5) as the destination address
Answer: B

6. Your VPN tunnel does not pass traffic. You run the "get ike cookie" command and discover that there is no cookie. What two (2) options should you check first?
A. Routes
B. Policy configuration
C. Phase 1 configuration options
D. Phase 2 configuration options
Answer: AC

7. By default, from which hardware component is the startup copy of the ScreenOS loaded?
A. ROM
B. NVRAM
C. TFTP server
D. Internal Flash
E. PCMCIA Card
Answer: D

8. Using the CLI, if the startup copy of the ScreenOS on a NS-204 is corrupted, from which two (2) alternate locations can an image be loaded?
A. ROM
B. TFTP server
C. Internal Flash
D. PCMCIA Card
E. Compact Flash Card
Answer: BE

9. Assuming factory default settings, which statement describes the minimum requirements for WebUI management access?
A. Connect a PC addressed on the 192.168.1.0 subnet to any interface, open a browser and access 192.168.1.1
B. Terminate the bootup sequence from the console device, open a browser on the console device and access 192.168.1.1
C. Connect a PC addressed on the 192.168.1.0 subnet to the lowest numbered interface, open a browser and access 192.168.1.1
D. Using the CLI, define an IP address on a physical interface, connect a PC to the interface and open a browser to the interface address
E. Using the CLI, assign an IP address to the VLAN1 interface, connect a PC to any interface and open a browser to the VLAN interface address
Answer: C

10. When configuring the Untrust interface with an IP address and enabling Telnet and WebUI management, which sequence of steps must be performed to make the interface operational at the end of the configuration sequence?
A. Assign the interface to a zone, define the IP address, enable Web and Telnet services
B. Assign the interface to a zone, define the IP address, accept default management services
C. Assign the interface to a virtual router, define the IP address, enable Web and Telnet services
D. Assign the interface to a zone, define the IP address, define a manage IP address, accept default management services
E. Assign the interface to a virtual router, define the IP address, define a manage IP address, enable Web and Telnet services
Answer: A

PDF VERSION OF THE EXAM
http://www.certifyme.com/demos/JN0-520.zip

Official Page for the Exam
JN0-520 Braindumps 100% Pass Guaranteed at First Attempt - CertifyMe