JN0-532 Free Demo Download
Certinside offers free demo for JN0-532 151 Q & As with Expert Explanations). You can check out the interface, question quality and usability of our practice exams before you decide to buy it.
Download JN0-532 Exam Pdf Demo
Download JN0-532 Exam iEngine Demo
Exam : Juniper JN0-532
Title : FWV,Specialist(JNCIS-FWV)
1. 1.10.5 ip-prot 6
What will be the resulting output in the debug for which this was created?
A. If the packet has a src-ip of 1.1.7.250 or a dst-ip of 10.1.10.5 or has TCP as its protocol then it will be captured
B. If the packet has a src-ip of 1.1.7.250 or a dst-ip of 10.1.10.5 or has UDP as its protocol then it will be captured
C. If the packet has a src-ip of 1.1.7.250 and a dst-ip of 10.1.10.5 and has TCP as its protocol then it will be captured
D. If the packet has a src-ip of 1.1.7.250 and a dst-ip of 10.1.10.5 and has UDP as its protocol then it will be captured
Answer: C
4. Click the Exhibit button.
In the exhibit, which two can be determined about the VPN? (Choose two.)
A. NAT-traversal is enabled.
B. The rekey interval is 8 hours.
C. This device initiated the Phase 1 negotiations.
D. The certificate used in this exchange is set to never expire.
Answer: BC
5. You have created a virtual router called VSYSA-vr and made it shareable. You then create the VSYS using the WebUI, telling it to use an existing VR and selecting the VR called VSYSA-vr.
What is the status of the virtual router after you create the VSYS?
A. The router will be the default router but will no longer be shared.
B. The router will be the default router and will still have a shareable status.
C. The system will not let you use a shared virtual router when you create a new VSYS. The initial virtual router must be private.
D. The system will not create a private vr for the VSYS but will assign the untrust-vr as the default router. The shared Virtual router will not be the default router.
Answer: B
6. Click the Exhibit button.
Review the exhibit. Track-ip has failed on the device, but the device did not fail over to the second unit in the cluster:
Why has failover not occurred?
A. The physical interfaces have not failed.
B. The track-ip interval is not sufficient to cause failover.
C. The track-ip address weight is not sufficient to cause failover.
D. The track-ip address threshold is not sufficient to cause failover.
Answer: C
7. Which three OSPF parameters are interface parameters? (Choose three.)
A. cost
B. priority
C. neighbor list
D. summarization
E. advertise default route
Answer: ABC
8. To which three ScreenOS components can a policy-based routing policy be bound? (Choose three.)
A. zone
B. policy
C. interface
D. virtual router
E. virtual system
Answer: ACD
9. Which ScreenOS CLI command is necessary for configuring IGMP on interface ethernet0/1?
A. set igmp interface ethernet0/1
B. set multicast interface ethernet0/1
C. set interface ethernet0/1 igmp router
D. set igmp interface ethernet0/1 enable
Answer: C
10. Which command is used to verify that IGMP is running correctly?
A. get route igmp
B. get igmp query
C. set igmp query interface e0/1
D. exec igmp interface e0/1 query
Answer: D
2. During main mode negations a failure has occurred while using IKE certificates.
Which message pair would you review to troubleshoot this failure?
A. messages 1 & 2
B. messages 2 & 3
C. messages 3 & 4
D. messages 5 & 6
Answer: D
3. Review the exhibit.
Which two of the following elements must be configured on the ScreenOS device in order to support PIM-SM? (Choose two)
A. A multicast control policy
B. A bootstrap router process
C. A unicast routing protocol
D. A static RP
Answer: AC
4. Which ScreenOS CLI command is necessary for configuring IGMP on interface ethernet0/1?
A. set igmp interface ethernet0/1
B. set multicast interface ethernet0/1
C. set interface ethernet0/1 igmp router
D. set igmp interface ethernet0/1 enable
Answer: C
5. Click the Exhibit button.
In the exhibit, which two can be determined about the VPN? (Choose two.)
A. NAT-traversal is enabled.
B. The rekey interval is 8 hours.
C. This device initiated the Phase 1 negotiations.
D. The certificate used in this exchange is set to never expire.
Answer: BC
6. You have created a virtual router called VSYSA-vr and made it shareable. You then create the VSYS using the WebUI, telling it to use an existing VR and selecting the VR called VSYSA-vr.
What is the status of the virtual router after you create the VSYS?
A. The router will be the default router but will no longer be shared.
B. The router will be the default router and will still have a shareable status.
C. The system will not let you use a shared virtual router when you create a new VSYS. The initial virtual router must be private.
D. The system will not create a private vr for the VSYS but will assign the untrust-vr as the default router. The shared Virtual router will not be the default router.
Answer: B
7. Click the Exhibit button.
Review the exhibit. Track-ip has failed on the device, but the device did not fail over to the second unit in the cluster:
Why has failover not occurred?
A. The physical interfaces have not failed.
B. The track-ip interval is not sufficient to cause failover.
C. The track-ip address weight is not sufficient to cause failover.
D. The track-ip address threshold is not sufficient to cause failover.
Answer: C
8. Which two item pairs are exchanged during Phase 2 negotiations? (Choose two.)
A. proxy-id, SA proposal list
B. IKE cookie, SA proposal list
C. hash [ID + Key], DH key exchange
D. SA proposal list, optional DH key exchange
Answer: AD
9. 250 dst-ip 10.1.10.5 ip-prot 6
What will be the resulting output in the debug for which this was created?
A. If the packet has a src-ip of 1.1.7.250 or a dst-ip of 10.1.10.5 or has TCP as its protocol then it will be captured
B. If the packet has a src-ip of 1.1.7.250 or a dst-ip of 10.1.10.5 or has UDP as its protocol then it will be captured
C. If the packet has a src-ip of 1.1.7.250 and a dst-ip of 10.1.10.5 and has TCP as its protocol then it will be captured
D. If the packet has a src-ip of 1.1.7.250 and a dst-ip of 10.1.10.5 and has UDP as its protocol then it will be captured
Answer: C
4. Click the Exhibit button.
In the exhibit, which two can be determined about the VPN? (Choose two.)
A. NAT-traversal is enabled.
B. The rekey interval is 8 hours.
C. This device initiated the Phase 1 negotiations.
D. The certificate used in this exchange is set to never expire.
Answer: BC
5. You have created a virtual router called VSYSA-vr and made it shareable. You then create the VSYS using the WebUI, telling it to use an existing VR and selecting the VR called VSYSA-vr.
What is the status of the virtual router after you create the VSYS?
A. The router will be the default router but will no longer be shared.
B. The router will be the default router and will still have a shareable status.
C. The system will not let you use a shared virtual router when you create a new VSYS. The initial virtual router must be private.
D. The system will not create a private vr for the VSYS but will assign the untrust-vr as the default router. The shared Virtual router will not be the default router.
Answer: B
6. Click the Exhibit button.
Review the exhibit. Track-ip has failed on the device, but the device did not fail over to the second unit in the cluster:
Why has failover not occurred?
A. The physical interfaces have not failed.
B. The track-ip interval is not sufficient to cause failover.
C. The track-ip address weight is not sufficient to cause failover.
D. The track-ip address threshold is not sufficient to cause failover.
Answer: C
7. Which three OSPF parameters are interface parameters? (Choose three.)
A. cost
B. priority
C. neighbor list
D. summarization
E. advertise default route
Answer: ABC
10. Review the exhibit.
You’ve been asked to build a route-based hub and spoke network, with policy control for traffic travelling from spoke to spoke. Which two of the following configuration options will meet this requirement? (Choose two.)
A. Place the spoke tunnel interfaces in the trust zone and create policies on the spokes.
B. Place the spoke tunnel interfaces in the untrust zone and create policies on the spokes.
C. Create a single tunnel interface in the trust zone at the hub and enable intra-zone blocking.
D. Create separate tunnel interfaces at the hub and place them in different zones, then create policies at the hub.
Answer: BD
11. You have entered the command
set ffilter src-ip 1.1.7.250 dst-ip 10.1.10.5 ip-prot 6
What will be the resulting output in the debug for which this was created?
A. If the packet has a src-ip of 1.1.7.250 or a dst-ip of 10.1.10.5 or has TCP as its protocol then it will be captured
B. If the packet has a src-ip of 1.1.7.250 or a dst-ip of 10.1.10.5 or has UDP as its protocol then it will be captured
C. If the packet has a src-ip of 1.1.7.250 and a dst-ip of 10.1.10.5 and has TCP as its protocol then it will be captured
D. If the packet has a src-ip of 1.1.7.250 and a dst-ip of 10.1.10.5 and has UDP as its protocol then it will be captured
Answer: C
12. Click the Exhibit button.
In the exhibit, what is the source IP address of the multicast traffic?
A. 236.1.1.1
B. 10.10.10.1
C. 20.20.20.10
D. 20.20.20.200
Answer: B
13. Click the Exhibit button.
In the exhibit, what is the address of the multicast receiver?
A. 234.9.8.42
B. 192.168.10.2
C. 192.168.20.10
D. 192.168.20.200
Answer: D
14. To which three ScreenOS components can a policy-based routing policy be bound? (Choose three.)
A. zone
B. policy
C. interface
D. virtual router
E. virtual system
Answer: ACD
15. Which CLI command identifies the multicast sources visible to your ScreenOS device?
A. get route pim
B. get igmp source all
C. exec pim interface all query
D. get vrouter trust-vr protocol pim
Answer: D
16. Click the Exhibit button.
In the exhibit, the firewall administrator at the Storefront is complaining that when the communication to the DataCenter1 fails, the preexisting transfers and applications are dropped when the traffic is switched to DataCenter2.
Which statement explains this behavior?
A. SYN checking is enabled in the tunnel.
B. The weight value for the DataCenter2 is too high.
C. VPN monitor is misconfigured in the DataCenter2.
D. Phase 1 and Phase 2 negotiations to DataCenter2 did not occur on time.
Answer: A