Juniper Networks Certified Internet Specialist (JNCIS-FWV)

1.

You want to configure the NetScreen Remote client to use a preshared key. You select the My Identity configuration screen but you cannot find the option. What is causing the problem?

This should be configured under the Authentication tab. You have to set the ID type option to Pre-Shared key. This should be configured under the Key Exchange tab. You have to set the Select Certificate option to none.

2.

Which statement about source-based routing is true?

Destination-based routes take precedence over source-based routes. You can only specify an interface as the next hop. You cannot configure source-based routing in the untrust-vr. You cannot redistribute source-based routes.

3.

You want to configure routing redundancy over your VPN network, but do not want to deploy a dynamic routing protocol. What should you do?

Configure multiple static routes, setting tags to designate primary and backup routes. Configure multiple static routes, adjusting the metric to determine primary and backup routes. Configure multiple static routes, adjusting the preference to create floating static routes as backups. Configure multiple static routes, adjusting the cost to determine primary and backup routes.

4.

What must be configured differently for a route-based VPN and a policy-based VPN?

remote gateway type binding the tunnel interface proxy-id proposals

5.

You have configured NSRP Active/Passive using the default vsd-group. You are using OSPF to learn routes from adjacent network devices. Which configuration is required to ensure the dynamic routes are available on both the devices?

You have to configure OSPF on the VSI interfaces. All dynamic routes learned on the VSI will be synced to the backup. Dynamic routes are RTO objects; no additional configuration is required. You have to unset nsrp vsd-group id 0 and configure OSPF on the local interfaces of the master deviceonly. You have to unset nsrp vsd-group id 0 and set nsrp vsd-group id 1 for the VSI interface, then configure OSPF on the local interfaces on both the devices.

6.

When configuring security proposals with the NetScreen-Remote client, how many Phase 2 proposals are included by default when you configure a new connection?

3 4 1 2

7.

A VPN tunnel that uses a CA certificate has failed Phase 1 negotiations. The peer's certificate has been rejected. What would be causing this problem?

The CA certificate has been revoked. One of the peering devices are not synced with the NTP server. The CRL has been downloaded, but the certificates have a CDP extension thus making them invalid. The device certificates were generated before the CRL was downloaded thus making them invalid.

8.

Which item in a virtual system is shared by default?

untrust zone in the untrust-vr trust zone in the untrust-vr untrust zone in the trust-vr trust zone in the trust-vr

9.

You are a read/write VSYS administrator. Your configuration requires the use of a MIP. Which statement correctly describes this situation?

You can create MIPs on any interface you can see in your interface list, including both private and shared interfaces. MIP creation can only be done by the root administrator, not a VSYS administrator. You can create MIPs only on sub-interfaces within your VSYS. All other MIPs need to be created by the rootlevel VSYS admin. You can create the MIPs on any interface imported into your VSYS, but not on shared interfaces.

10.

What must be enabled to protect Phase 2 key exchanges?

Phase 2 3-DES Phase 1 PFS Phase 2 SHA Phase 2 DH key exchange

Juniper Networks Certified Internet Specialist (JNCIS-FWV)

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Juniper Networks Certified Internet Specialist (JNCIS-FWV)

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner