JN0-330 無料問題集「Juniper JN0-330-Enhanced Services, Specialist(JNCIS-ES)」

（A）Telnet is not allowed because it is not considered secure.

（B）Telnet is not enabled as a host-inbound service on the zone.

（C）Telnet is not being permitted by self policy.

（D）Telnet is not being permitted by security policy.

（A）[edit security zones functional-zone management]
user@host# show
host-inbound-traffic {
protocols {
bgp;
ospf;
}

（B）[edit security zones security-zone trust]
user@host# show
host-inbound-traffic {
protocols {
bgp;
}
interfaces {
all {
host-inbound-traffic {
protocols {
ospf;
}

（C）[edit security zones security-zone trust]
user@host# show
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
protocols {
ospf;
bgp;
}

（D）[edit security zones functional-zone management]
user@host# show
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
protocols {
bgp;
ospf;
vrrp;
}
host-inbound-traffic {
protocols {
all;
vrrp {
except;
}

（A）It requires you to configure address entries in the junos-nat zone.

（B）The IP addresses being translated must be in the same subnet as the incoming interface.

（C）It requires you to configure address entries in the junos-global zone.

（D）It also supports PAT.

（A）[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
log {
session-init;
}

（B）[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
log;
count session-close;
}

（C）[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
count {
session-close;
}

（D）[edit security policies from-zone Private to-zone External]
user@host# show
policy allowTransit {
match {
source-address PrivateHosts;
destination-address ExtServers;
application ExtApps;
}
then {
permit {
tunnel {
ipsec-vpn VPN;
}
log {
session-close;
}

（A）Source pool NAT defines a one-to-one mapping from an original source IP address to a translated source IP address and port numbers for a range of IP addresses.

（B）Source pool NAT defines a one-to-one mapping from an original source IP address to a translated source IP address for a range of IP addresses.

（C）Once a connection is established from a source, all new connections from that source are translated to the same IP address in the pool.

（D）Source NAT pools allow for different connections from the same source IP address to be translated to different IP addresses in the pool.

（A）A logical interface can belong to multiple zones.

（B）All logical interfaces in a zone must belong to a single routing instance.

（C）All logical interfaces in a routing instance must belong to a single zone.

（D）A logical interface can belong to multiple routing instances.

（A）ge-0/0/3.0

（B）ge-0/0/0.0

（C）ge-0/0/1.0

（D）ge-0/0/2.0

（A）DNS traffic is denied.

（B）FTP traffic is permitted.

（C）HTTP traffic is denied.

（D）SMTP traffic is permitted.

（A）[edit security nat]
user@host# show
source-nat {
pool pool-1 {
address-range {
low 1.1.1.10 high 1.1.1.14 no-port-translation;
}

（B）[edit security nat]
user@host# show
source-nat {
pool pool-1 {
address-range {
low 1.1.1.10 high 1.1.1.14;
}
no-port-translation;
}

（C）[edit security nat]
user@host# show
interface ge-0/0/0.0 {
source-nat {
pool pool-1 {
address-range {
low 1.1.1.10 high 1.1.1.14 no-port-translation;
}

（D）[edit security nat]
user@host# show
interface ge-0/0/0.0 {
source-nat {
pool pool-1 {
address-range {
low 1.1.1.10 high 1.1.1.14;
}
no-port-translation;
}

（A）enabling network migrations

（B）allowing stateful packet inspection

（C）conserving public IP addresses

（D）preventing unauthorized connections from outside the network