JN0-350
Juniperネット会社の（JNCIS-ER）、試験コード：JN0-350、筆記試験：世界各地Prometricの試験センータで行います。試験タイプ：多くの項目の選択問題。試験時間：90分、合格点：70、点数がすぐ調べることが出来ます。試験の前に通さなければなりません認証：なし。企業で Juniperネット会社高級なルートのプラットフォームを運行します。JNCIS-ERはJuniperネット会社に良く知っている上に経験のある人のために設けられます。CIS-ERはJNCIA-ERより関連する知識がもっと多くて、内容が更に深いです
以下はJN0-350の問題集で、みんなの勉強に役に立てばいいです
7. You have enabled traceoptions for IKE using the configuration command set services ipsec-vpn
traceoptions flag ike.
Which command will display the resulting IKE logs?
A.show log ike
B.show log kmd
C.show log messages
D.show log ipsec-vpn
Answer: B
8. Which two statements are true about scheduler maps? (Choose two.)
A.A default scheduler map is applied to each interface.
B.A scheduler map is only needed on low speed interfaces.
C.A scheduler map is applied before a multifield firewall filter.
D.A scheduler map controls the resources assigned to a specific queue.
Answer: AD
9. Which statement is true when configuring CoS?
A.You define the transmit rate and buffer size in the scheduler map.
B.Priority and transmission rate define how packets are stored and dropped.
C.Buffer size and RED configuration define the priority and transmission rate.
D.Buffer size and RED configuration define how packets are stored and dropped.
Answer: D
10. You have policy-statement my-policy configured at the
[edit policy-options] configuration hierarchy.
At which two configuration hierarchies could you reference this policy? (Choose two.)
A.[edit protocols bgp]
B.[edit routing-options forwarding-table]
C.[edit interfaces lo0 family inet filter]
D.[edit services service-set my-service-set]
Answer: AB
28. Which statement about stateless firewall filters is true?
A.All rejected or discarded packets are sent to the firewall log.
B.You must specify the action "then log" for packets to be logged to the firewall log.
C.You must specify the action "then log" for the packets to be logged in the syslog file.
D.You must specify the action "then syslog" for packets to be logged in the firewall log.
Answer: B
29. Your router is under distributed denial-of-service (DDoS) attack, which tool should you use to protect
your Routing Engine (RE)?
A.a policer applied to the input of fe-0/0/0.0
B.a firewall filter applied to the input of lo0.0
C.a firewall filter applied to the input of fe-0/0/0.0
D.a policy-statement to discard all routes to source addresses of DoS packets
Answer: B
30. Your router is under a denial-of-service attack, you apply a firewall filter to lo0 to silently drop the
packets.
Which firewall filter action enables you to achieve this?
A.deny
B.reject
C.discard
D.blackhole
Answer: C
以下はJN0-350の問題集で、みんなの勉強に役に立てばいいです
7. You have enabled traceoptions for IKE using the configuration command set services ipsec-vpn
traceoptions flag ike.
Which command will display the resulting IKE logs?
A.show log ike
B.show log kmd
C.show log messages
D.show log ipsec-vpn
Answer: B
8. Which two statements are true about scheduler maps? (Choose two.)
A.A default scheduler map is applied to each interface.
B.A scheduler map is only needed on low speed interfaces.
C.A scheduler map is applied before a multifield firewall filter.
D.A scheduler map controls the resources assigned to a specific queue.
Answer: AD
9. Which statement is true when configuring CoS?
A.You define the transmit rate and buffer size in the scheduler map.
B.Priority and transmission rate define how packets are stored and dropped.
C.Buffer size and RED configuration define the priority and transmission rate.
D.Buffer size and RED configuration define how packets are stored and dropped.
Answer: D
10. You have policy-statement my-policy configured at the
[edit policy-options] configuration hierarchy.
At which two configuration hierarchies could you reference this policy? (Choose two.)
A.[edit protocols bgp]
B.[edit routing-options forwarding-table]
C.[edit interfaces lo0 family inet filter]
D.[edit services service-set my-service-set]
Answer: AB
28. Which statement about stateless firewall filters is true?
A.All rejected or discarded packets are sent to the firewall log.
B.You must specify the action "then log" for packets to be logged to the firewall log.
C.You must specify the action "then log" for the packets to be logged in the syslog file.
D.You must specify the action "then syslog" for packets to be logged in the firewall log.
Answer: B
29. Your router is under distributed denial-of-service (DDoS) attack, which tool should you use to protect
your Routing Engine (RE)?
A.a policer applied to the input of fe-0/0/0.0
B.a firewall filter applied to the input of lo0.0
C.a firewall filter applied to the input of fe-0/0/0.0
D.a policy-statement to discard all routes to source addresses of DoS packets
Answer: B
30. Your router is under a denial-of-service attack, you apply a firewall filter to lo0 to silently drop the
packets.
Which firewall filter action enables you to achieve this?
A.deny
B.reject
C.discard
D.blackhole
Answer: C
