Exam Code: JN0-533 (Practice Exam Latest Test Questions VCE PDF)
Exam Name: FWV, Specialist (JNCIS-FWV)
Certification Provider: Juniper
Free Today! Guaranteed Training- Pass JN0-533 Exam.
2021 Nov JN0-533 latest exam
Q41. Policy-based routing consists of which three ScreenOS objects? (Choose three.)
A. extended access lists
B. match groups
C. action groups
D. address books
E. security policy
Answer: A,B,C
Q42. You are receiving 3000 SYN packets per second from multiple outside sources to the same destination IP address in your network. You want the SYN proxy Screen option to engage when SYN packets exceed 2000 per second, but the SYN proxy is not engaging.
What is causing the problem?
A. The SYN packets are being sent to multiple destination ports.
B. The alarm threshold is too high.
C. The destination threshold is too high.
D. The option to only generate alarms without dropping packets is set to ON.
Answer: A
Q43. Click the Exhibit button.
Given the output shown in the exhibit, which command would you use to view the number of attacks that have been blocked by the Screen options on the Untrust zone?
A. ssg5-> get counter screen interface ethernet2/1
B. ssg5-> get zone Untrust screen
C. ssg5-> get counter screen zone Untrust
D. ssg5-> get counter statistics interface ethernet2/1
Answer: C
Q44. You are building an IPsec VPN and want to authenticate and encrypt the content.
Which two Phase 1/Phase 2 (P1/P2) proposals would achieve this goal? (Choose two.)
A. P1: pre-g5-3des-sha, P2: g5-esp-3des-sha
B. P1: pre-g2-aes128-sha, P2: g5-ah-aes128-sha
C. P1: pre-g5-des-md5, P2: g5-ah-des-md5
D. P1: pre-g2-esp128-sha, P2: g2-esp-aes128-sha
Answer: A,D
Q45. What is the initial default username and password for all ScreenOS devices?
A. administrator/password
B. root/password
C. netscreen/netscreen
D. admin/netscreen1
Answer: D
Latest JN0-533 exam:
Q46. A ScreenOS device detects a large number of sessions that match the same deep inspection attack object. What are two ways to configure the device? (Choose two.)
A. Activate dynamic firewall policies.
B. Close the connection and disallow further connections from the client.
C. Close the connection and rate-limit further connections to the server.
D. Log an alert.
Answer: B,D
Q47. A routing table contains an IBGP route, a RIP route, an OSPF external Type 2 route, and an EBGP route for 192.168.0.0/16. When the router receives traffic destined for, which route will the router use by default?
A. the EBGP route
B. the IBGP route
C. the OSPF route
D. the RIP route
Answer: A
Q48. You have been making changes on an NSRP cluster and find that the ScreenOS devices are out of sync. You want to synchronize the devices' configurations together.
Which command and process are needed to accomplish this task?
A. Run the command set nsrp sync global-config check-sum on the local device and then reset the peer device.
B. Run the command set nsrp sync global-config save on the backup device and then reset the backup device.
C. Run the command exec nsrp sync config save on the peer device and then reset the peer device.
D. Run the command exec nsrp sync global-config save on the backup device and then reset the backup device.
Answer: D
Q49. How is the maximum bandwidth pool allocated when all policies share the same priority?
A. first come first served
B. round robin
C. packet DSCP value
D. policy order number
Answer: B
Q50. When a new session is created on the primary ScreenOS device, what are two results that happen on the backup device? (Choose two.)
A. Session information is sent in real time from the master to the backup over the HA link.
B. Session update messages are bundled together and sent over every 10 seconds to the backup over the HA link.
C. A session is created on the backup device with a timeout value of 8 times the default.
D. A session is created on the backup device and is completely identical to that of the master's session.
Answer: A,C