JN0-336題庫下載 - JN0-336學習資料人生充滿選擇，選擇不一定給你帶來絕對的幸福，但選擇給了你絕對的機會，而一旦錯過選擇，只能凝望。 PDFExamDumps Juniper的JN0-336考試培訓資料是每個IT人士通過IT認證必須的培訓資料，有了這份考試資料就等於手握利刃，所有的考試難題將迎刃而解。 PDFExamDumps Juniper的JN0-336考試培訓資料是針對性強，覆蓋面廣，更新快，最完整的培訓資料，有了它，所有的IT認證都不要害怕，你都會順利通過的。 最新的 JNCIS-SEC JN0-336 免費考試真題 (Q64-Q69):問題 #64
Your network uses a single JSA host and you want to implement a cluster.
In this scenario, which two statements are correct? (Choose two.)
A. The software versions on both primary and secondary hosts
B. The primary and secondary hosts must be configured with the same storage devices.
C. The secondary host can backup multiple JSA primary hosts.
D. The cluster virtual IP will need an unused IP address assigned.
答案：A,D
解題說明：
According to the Juniper Networks JNCIP-SEC Study Guide, when setting up a cluster with a single JSA host, both the primary and secondary hosts must have the same software version installed. Additionally, an unused IP address must be assigned to the cluster virtual IP. The primary and secondary hosts do not need to be configured with the same storage devices, and the secondary host cannot be used to backup multiple JSA primary hosts.
問題 #65
Which two statements about SRX chassis clustering are correct? (Choose two.)
A. SRX chassis clustering supports active/passive and active/active for the data plane.
B. SRX chassis clustering supports active/passive for the control plane.
C. SRX chassis clustering supports active/active for the control plane.
D. SRX chassis clustering only supports active/passive for the data plane.
答案：A,B
解題說明：
SRX chassis clustering allows for both active/passive and active/active configurations for the data plane.
In an active/passive setup, one node is active (handling traffic) while the other remains passive (idle and waiting to take over in case of failure). In an active/active setup, both nodes can handle traffic simultaneously, distributing different traffic flows or services between them for load balancing and redundancy.
For the control plane, SRX chassis clustering typically operates in an active/passive mode. This means one node actively handles the control plane responsibilities, such as managing routing tables and maintaining sessions, while the other stands by ready to take over these tasks if the active node fails.
問題 #66
You enable chassis clustering on two devices and assign a cluster ID and a node ID to each device.
In this scenario, what is the correct order for rebooting the devices?
A. Reboot only the secondary device since the primary will assign itself the correct cluster and node ID.
B. Reboot only the primary device since the secondary will assign itself the correct cluster and node ID.
C. Reboot the secondary device, then the primary device.
D. Reboot the primary device, then the secondary device.
答案：C
解題說明：
When chassis clustering is enabled and IDs are assigned, it is typically recommended to first reboot the secondary device. This allows the secondary device to fully integrate and recognize its role and settings within the cluster without affecting the ongoing traffic that the primary device might be handling.
Once the secondary device has successfully rebooted and is operational within the cluster, the primary device can then be rebooted. This ensures that the primary device's reboot does not cause any network downtime, as the secondary device, now fully operational, can take over the traffic and roles as needed.
問題 #67
Which statement defines the function of an Application Layer Gateway (ALG)?
A. The ALG uses software processes for managing specific protocols.
B. The ALG contains protocols that use one application session for each TCP session.
C. The ALG uses software that is used by a single TCP session using the same port numbers as the application.
D. The ALG uses software processes for permitting or disallowing specific IP address ranges.
答案：A
解題說明：
The statement that defines the function of an Application Layer Gateway (ALG) is: The ALG uses software processes for managing specific protocols. An ALG is a security component that operates at the application layer (layer 7) of the OSI model and handles data associated with certain application protocols, such as SIP, FTP, RTSP, etc. An ALG acts as a proxy or intermediary between the client and the server applications and performs various functions, such as address and port translation, resource allocation, application response control, and synchronization of data and control traffic. An ALG can also inspect and modify the application payload to enable firewall or NAT traversal, prevent spoofing or DoS attacks, or enforce granular security policies based on application-specific commands. Reference: = Application-level gateway - Wikipedia, What Is an Application Layer Gateway (ALG)? | F5, What is ALG
** Application Layer Gateway | 3CX
問題 #68
Which three statements about SRX Series device chassis clusters are true? (Choose three.)
A. Heartbeat messages verify that the chassis cluster control link is working.
B. Recovery from a control link failure requires that the secondary member device be rebooted.
C. A control link failure causes the secondary cluster node to be disabled.
D. Chassis cluster member devices synchronize configuration using the control link.
E. Chassis cluster control links must be configured using RFC 1918 IP addresses.
答案：A,C,D
解題說明：
B: Chassis cluster member devices synchronize configuration using the control link: This statement is correct because the control link is used for configuration synchronization among other functions.
C: A control link failure causes the secondary cluster node to be disabled: This statement is correct because a control link failure causes the secondary node to become ineligible for primary role and remain in secondary role until the control link is restored.
E: Heartbeat messages verify that the chassis cluster control link is working: This statement is correct because heartbeat messages are sent periodically over the control link to monitor its status.