Juniper JN DX Specialist (JNCIS-DX) Download Full Version :

Transcription

1 Juniper JN0-730 DX Specialist (JNCIS-DX) Download Full Version :

2 Answer: A, D QUESTION: 258 In the exhibit, you configure NAT-src to translate traffic from the Corporate zone to the Internet zone and do not specify a DIP. Which address will be used as the outbound source address? A B C. NAT-src requires a DIP D. The original source address Answer: A QUESTION:

3 Click the Exhibit button to view the exhibit. On which interface would you configure a VIP for translating inbound traffic destined for the partner servers? A. E1 B. E2 C. E7 D. E8 E. You cannot use a VIP in this environment; a VIP must be configured in the Untrust zone. Answer: E QUESTION:

4 In the exhibit, on which interface would you configure a VIP for translating inbound traffic destined for the partner servers? A. E1 B. E2 C. E7 D. E8 E. You cannot use a VIP in this environment; a VIP must be configured in the Untrust zone. Answer: E QUESTION:

5 Traffic from the Internet to the partner servers must use a VIP. In the exhibit, what is true about the configuration of this feature? A. You cannot use a VIP in this environment. B. The VIP can be configured on the e0/4 interface. C. The VIP can be configured in the Corporate or Internet zone using a different subnet than the physical interface. D. The VIP will work only if the destination ports in the incoming packet headers are mapped to the same ports in the Corporate zone. Answer: A QUESTION: 262 Click the Exhibit button to view the exhibit. Review the exhibit. Which two forms of address translation could have generated the output shown? 100

6 A. MIP B. Interface-based translation C. NAT-src with a DIP, fixed-port enabled D. NAT-src with a DIP, fixed-port disabled Answer: B, D QUESTION: 263 In the exhibit, which two forms of address translation could have generated the output shown? A. MIP B. Interface-based translation C. NAT-src with a DIP, fixed-port enabled D. NAT-src with a DIP, fixed-port disabled Answer: A, C QUESTION:

7 In the exhibit, which two forms of address translation would have generated the output shown? (Choose two.) A. MIP B. NAT-src with no DIP C. Interface-based translation D. NAT-src with a DIP, fixed-port disabled Answer: B, C QUESTION:

8 In the exhibit, which two forms of address translation would have generated the output shown? (Choose two.) A. MIP B. Interface-based translation C. NAT-src with a DIP, fixed-port enabled D. NAT-src with a DIP, fixed-port disabled Answer: A, C QUESTION: 266 Click the Exhibit button to view the exhibit. Review the exhibit. You need to make a bidirectional gateway between the 5XT and the 208. What gateway address will you configure on the 208 for the VPN? A B C D Answer: C QUESTION:

9 In the exhibit, you need to make a bidirectional VPN between the SSG 5 and the SSG 550. On the SSG550, which address will you use to configure the IKE gateway? A B C D Answer: C QUESTION: 268 In the exhibit, which two network addresses could appear in the remote proxy-id for the SSG 550 during the IKE phase two exchange? (Choose two.) A B /8 C /8 D /32 104

10 Answer: B, D QUESTION: 269 Click the Exhibit button to view the exhibit. Review the exhibit. In this route-based VPN configuration, where are policies going to be required? A Trust to Untrust B Untrust to Trust C. 5XT - Trust to Untrust D. 5XT - Untrust to Trust Answer: A, B QUESTION: 270 In this route-based VPN configuration, where are the two policies going to be required? (Choose two.) 105

11 A. SSG 5 - trust to untrust B. SSG 5 - untrust to trust C. SSG trust to untrust D. SSG untrust to trust Answer: C, D 106

12 For More exams visit Kill your exam at First Attempt...Guaranteed!