Juniper JN0-521 Exam - Certifyme.com

Free JN0-521 Sample Questions:

Q: 1 A ScreenOS firewall has the correct interfaces addressed and active. A policy is written allowing interzone FTP traffic from a directly connected client. But the traffic does not cross the firewall from the client to the server. What is the most likely problem with the firewall?
A. The ScreenOS firewall has no physical connection to the FTP server.
B. The ALG option on the ScreenOS firewall has not been enabled for FTP traffic.
C. The ScreenOS firewall does not have a route defined to the FTP servers' subnet.
D. The ScreenOS firewall does not have a route defined to the FTP clients subnet.
Answer: C

Q: 2 Click the Exhibit button. In the exhibit, why is the packet dropped?

A. interface down
B. route not configured
C. policy not configured
D. denied by policy 1005
Answer: C

Q: 3 Which three options allow proper configuration of NAT-dst? (Choose three.)
A. the default address book entry of "any" in the internal zone
B. the default address book entry of "any" in the external zone
C. a secondary address on one of the interfaces in the internal zone
D. an address book entry for the address to be translated in the internal zone
E. a static route to the appropriate subnet using a private interface as the outbound interface
Answer: C, D, E

Q: 4 Which two statements are true in regards to a ScreenOS firewall in transparent mode? (Choose two.)
A. VPNs can terminate to the VLAN1 interface IP address.
B. Static routes must be configured if multiple virtual routers are going to be used.
C. It can be installed in a network without the requirement to reconfigure IP addressing schemes.
D. You must use the console port to manage the device as you cannot manage the device using an Ethernet port.
Answer: A, C

Q: 5 What are three major concerns when sending private data over a public medium? (Choose three.)
A. integrity
B. authority
C. capacity
D. confidentiality
E. authentication
Answer: A, D, E

Q: 6 By default, from which hardware component is the startup copy of the ScreenOS loaded?
A. NVRAM
B. TFTP server
C. internal flash
D. PCMCIA card
Answer: C

Q: 7 Which three must a policy contain? (Choose three.)
A. action
B. service
C. address
D. application
E. policy name
Answer: A, B, C

Q: 8 What is the default mode for an interface in the trust zone?
A. NAT
B. route
C. Layer 2
D. Layer 3
E. transparent
Answer: A

Q: 9 Which command is used to verify IKE Phase 1 is complete?
A. get sa active
B. get ike active
C. get ike cookie
D. get flow active
Answer: C

Q: 10 When managing a ScreenOS device using the WebUI and performing an image upgrade, from which hardware component will the ScreenOS image be loaded?
A. TFTP server
B. PC local disk
C. internal flash
D. Compact Flash Card
Answer: B


PDF VERSION OF THE EXAM
http://www.certifyme.com/demos/JN0-521.zip

Official Page for the Exam
JN0-521 Braindumps 100% Pass Guaranteed at First Attempt - CertifyMe