Juniper JN0-530 Exam - Certifyme.com

Free JN0-530 Sample Questions:

Q: 1 What is the purpose and use of digital certificates?
A. Prove authenticity and bind public keys to an entity
B. Prove authenticity and bind private keys to an entity
C. Hold both public and private keys of the bearer of the certificate
D. Hold both the public and private keys of the issuer of the certificate
Answer: A

Q: 2 You create a policy-based VPN, and select an address group for the source address. What will be the source part of the proxy-id seen by the remote security gateway?
A. 0.0.0.0/0
B. The last member of the address group
C. The first member of the address group
D. A string of all of the addresses in the address group
E. The subnet that contains all addresses in the address group
Answer: A

Q: 3 Click the Exhibit button.

Refer to the exhibit. This Hub and Spoke design uses route-based VPNs and has intra-zone blocking enabled on the Evil zone. What is the minimum number of policy rules, across all devices, required to establish full, bi-directional communications between all locations?
A. 4
B. 6
C. 7
D. 9
E. 10
F. 12
Answer: C

Q: 4 Which two (2) processes are able to use certificates on a NetScreen device?
A. IKE Phase 2 VPNS
B. Certify NTP Servers
C. IKE Phase 1 Gateways
D. Management using SNMP
E. Management SSL traffic
Answer: C, E

Q: 5 How many tunnels would have to be created to build a full mesh between 10 VPN devices?
A. 9
B. 10
C. 20
D. 45
E. 100
Answer: D

Q: 6 You have created a VPN to a dynamic peer. Which two (2) configured parameters must match?
A. Peer id on the static side
B. Local id on the static side
C. Peer id on the dynamic side
D. Local id on the dynamic side
E. IP address on the static side
F. IP address on the dynamic side
Answer: A, D

Q: 7 What three (3) items do you need to download and install on your NetScreen device for IKE gateways to be able to use digital certificates without OCSP?
A. The CRL list
B. The SCEP list
C. A local Certificate
D. The CA public key certificate
E. The CA private key Certificate
Answer: A, C, D

Q: 8 Which two (2) statements regarding NHTB are correct?
A. If the hub device is running pre-5.0 software, manual configuration of NHTB is required on the hub
B. If the spoke device is not a NetScreen device, manual configuration of NHTB is required on the hub
C. If the spoke device is not a NetScreen device, manual configuration of NHTB is required on the spoke
D. If the spoke device is running pre-5.0 software, manual configuration of NHTB is required on the hub device
E. If the spoke device is running pre-5.0 software, manual configuration of NHTB is required on the spoke device
Answer: B, D

Q: 9 What three (3) components make up a redundant VPN configuration?
A. Master
B. Slaves
C. Monitor
D. Targets
E. Backups
F. VPN Groups
Answer: C, D, F

Q: 10 Which is a valid Phase 1 IKE proposal?
A. pre-g1-des-md5
B. g2-esp-des-md5
C. g2-esp-aes128-md5
D. nopfs-esp-des-md5
Answer: A


PDF VERSION OF THE EXAM
http://www.certifyme.com/demos/JN0-530.zip


Official Page for the Exam
JN0-530 Braindumps 100% Pass Guaranteed at First Attempt - CertifyMe