C2010-501 IBM Maximo Asset Management V7.5 Infrastructure Implementation

Test information:
Number of questions: 57
Time allowed in minutes: 90
Required passing score: 71%
Languages: English

Related certifications:
IBM Certified Infrastructure Deployment Professional - Maximo Asset Management V7.5
IBM Certified Advanced Deployment Professional - IBM Service Management Asset Management V5

Below are the high level objectives for this exam. We recommend reviewing the Study Guide for more detailed information on the test objectives to provide a better idea of the content which will be covered on the exam.
Section 1: Planning

Given a customers need to deploy IBM Maximo Asset Management (Maximo), evaluate the environment, user requirements, security considerations, language support and organizational processes so that an implementable, quantifiable, and scalable build plan for the installation of Maximo has been developed.

Given that a customer will have Maximo installed on a supported J2EE platform, explain the J2EE configuration concepts so that the customer understands how J2EE can be configured to meet their needs.

Given that a customer is planning for a Maximo Asset Management installation, explain JVM Performance and Optimization Settings and Concepts so that the tools to optimize the system have been explained.

Given that Maximo functionality is to be separated onto different JVMs for performance reasons, explain the JVM roles for Maximo so that an individual understands why roles should be separated onto different JVM and the benefits for doing so.

Given that Maximo is to be installed, define the installation system requirements so that the environment is ready for Maximo to be installed.

Given that Maximo security implementation decisions need to be made, explain the different options so that the correct planning decisions can be made.

Given that Maximo is to be installed, configure the security requirements needed to install Maximo so that pre-installation Security Configuration has been completed.

Given that Maximo is to be installed, review the Maximo search types with the customer and explain the impact that they can have on system performance so that search types and their implications have been reviewed with the customer.

Given a customers need to deploy Maximo, assess the proposed infrastructure so that the installation of Maximo can be implemented on the proposed infrastructure.

Section 2: Installation
Given that IBM Maximo Asset Management (Maximo ) middleware has been defined and Maximo is to be installed explain the Maximo installation options so that the Maximo installation options are defined.

Given that Maximo is to be installed, explain the Maximo installation flow so that the Maximo, fix packs, add-ons and industry solutions installation flow is understood.

Given that Maximo is to be installed, explain the database script installation process so that process to update the Maximo database is understood.

Given that Maximo is to be installed, explain the different Maximo installation components so that the components and how they are used are understood.

Given that Maximo is to be installed, describe the use of the autonomic deployment engine so that the Maximo installation use of the deployment engine is understood.

Given that Maximo has been installed describe the use of the Maximo tools so that the Maximo tools usage is understood.

Given that an Maximo product is to be installed, perform the tasks to manually install Maximo so that Maximo is installed with the current fix pack.

Given that the middleware has been installed, validate core technology configurations so that users can connect to the installed Maximo system via the middleware.

Given that the Maximo product is in the process of installation or has been installed, describe the installation and tool log files so that the appropriate course of action can be taken.

Given that the Maximo product is installed, verify that the Maximo database has been installed correctly so that the Maximo system is ready to be configured.

Given that Maximo is to be upgraded, explain the Maximo upgrade process from 7.1 to 7.5 so that the customer understands the upgrade process.

Given that the IBM product is installed, verify which version of Maximo has been installed so that Maximo is installed to the targeted level.

Section 3: Configuration
Given IBM Maximo Asset Management (Maximo) is already installed, enable Application Server Security within Maximo configuration and J2EE server so that users can connect to Maximo by using LDAP authentication.

Given Maximo is already installed and is ready to integrate with other systems, validate the Maximo Integration Framework (MIF) configuration is correct and functional so that Maximo can send and receive transactions to and from external systems.

Given Maximo is already installed,know, explain and utilize the maximo.properties file so that the Maximo system can be configured to use alternate middleware and database connection points.

Given that Maximo is already installed, manually build a Maximo EAR file and deploy it so that the Maximo application has been updated on J2EE server.

Section 4: PerformanceTuningandProblemDetermination
Given that IBM Maximo Asset Management (Maximo) is installed,review and explain the Maximo performance log settings so that the Maximo system is running at optimal performance level.

Given that Maximo is installed, utilize basic database functionality to analyze installation/performance issues so that the database is normalized and tuned to top performance levels.

Given that the Maximo product is installed, determine if queries are efficient so that Maximo components queries are optimized.

Given that Maximo is installed, review the Start Center portlets so that users achieve a balance between system performance and key data accessibility.

Given that the application server instance requires performance analysis, assess the application server performance so that application server performance is analyzed and corrective actions can be taken.

Given that Thread Dumps and Heap Dumps are to be analyzed,perform the tasks to manually install Maximo so that the Heap Dumps are analyzed and Garbage Collection is tuned in the middleware.

---

QUESTION 1
LDAPSYNC is an IBM Maximo Asset Management V7.5 cron task that can be used forwhat purpose?

A. To synchronize users from a LDAP capable server, using the J2EE server security repository
B. To synchronize users from a LDAP capable server, bypassing the J2EE server security repository
C. To synchronize users from a LDAP capable server, using the application server security configuration
D. To synchronize users from a LDAP capable server, bypassing the J2EE bind repository authentication

Answer: B

---

QUESTION 2
Which statement describes how garbage collection is used?

A. Garbagecollection frees memory by removing dead objects from the heap.
B. Garbage collection compresses the heap space through data compression.
C. Garbage collection forces the freeing of memory in the heap by dumping the objects in the order of least used to most used.
D. Garbage collection uses a properly tuned garbage collection agent to gather unused data in the heap and purge it from the system.

Answer: A

---

QUESTION 3
When reviewing customer requirements for an IBM Maximo Asset Management environment, the customer explains that they have no plans for a development or a user acceptance testing environment. What is a reason that should be given to the customer as to why they should have a development environment?

A. Development environments always differfrom production environments in the number of JVMs.
B. Development environments typically utilize the same database server and J2EE servers
as in the production environments.
C. Development environments allow for the creation, configuration, and development of test code without compromising the integrity of the production system.
D. Development environments must utilize the IBM Maximo Integration Framework components to export and import code and configuration changes into the production environments.

Answer: C

---

QUESTION 4
How can IBM Maximo Asset Management user login performance be improved?

A. set the default Start Center to one with minimal portlets
B. minimize the number of Start Centers presented as tabs to a user at login
C. ensure users have their own database user account used by reporting processes
D. increase the number of roles per user to maximize the number of Start Center tabs presented at login

Answer: A

---

QUESTION 5
When should IBM Maximo Asset Management load testing beperformed?

A. during the implementation phase to expose performance problems
B. during the design phase to ensure hardware is correctly sized for procurement
C. during the go live phase to ensure the system is running per client requirements
D. during thepost-implementation phase to ensure satisfactory system performance level with active users

Answer: A

Click here to view complete Q&A of C2010-501 exam
Certkingdom Review

Best IBM C2010-501 Certification, IBM C2010-501 Training at certkingdom.com

JN0-120 Networks Certified Internet Associate, E-series

JNCIA-E Exam Objectives (Exam: JN0-120)

Operation, Configuration, and Troubleshooting
Identify the redundancy options of an E-series Router.
Describe the E-series Router chassis and line modules.
Define the various switch fabrics and ATM buses.
List the steps involved in moving a packet through the router.
Describe how the E-series Router handles routing updates.
List the different modes of operation.
Describe the components of the E-series Router file system.
Describe the steps involved in a basic configuration.
Identify the boot options available for an E-series Router.
Describe the capability and configuration of SNMP.
List the steps involved in upgrading or downgrading the software on an E-series Router.

E-series Router Virtual Routers
Identify the various uses for virtual routers.
List the steps involved in configuring a virtual router.
Define how to manage a virtual router.

Broadband Remote Access Services (B-RAS)
Define the traditional Remote Access Services.
Describe the basic components of a DSL network.
List the various B-RAS service deployment options.
Identify the steps to setup a basic ATM configuration.

Routed and Bridged 1483
Identify the IP addressing options for a routed 1483 network.
Describe the routing table constraints encountered when using routed 1483 encapsulation.
List the steps in configuring an E-series Router to support a routed 1483 network.
Identify the IP addressing options for a bridged 1483 network.
Describe the routing table constraints encountered when using bridged 1483 encapsulation.
Define the components of DHCP and how it is used.
List the steps in configuring an E-series Router to support a bridged 1483 network.

PPP over ATM (PPPoA)
Describe the processing of a PPP packet.
Define the Authentication, Authorization, and Accounting (AAA) option available for the E-series Router.
Identify the configuration steps involved in setting up authentication options.
List the options available for assigning an IP address to an interface.
Describe how virtual routers are used in a PPPoA service.
Identify the steps involved in configuring PPPoA.

PPP over Ethernet (PPPoE)
Describe the components of a PPP over Ethernet service.
Define the PPP over Ethernet Discovery Stage including the various message types.
Identify the steps for configuring PPPoE using a DSL network.
Identify the steps for configuring PPPoE using a metro Ethernet network.

Dynamic Configuration Mode

Describe the profile configuration utilities available for each B-RAS service offering.
List the services available for use with the autoconfig command.
Describe how a profile is used to describe and define an interface.

Layer 2 Tunneling Protocol (L2TP)
Describe the applications for using L2TP as a Virtual Private Network technology.
Describe the operation of the L2TP Access Concentrator.
Describe the operation of the L2TP Network Server.
List the steps for establishing an L2TP tunnel.
List the steps for establishing an L2TP session.
Identify the steps for configuring the E-series Router as an LAC.
Identify the steps for configuring the E-series Router as an LNS.

E-series Router Policy Management
Identify the components involved in classifying a packet for policy management.
Describe the functionality and configuration of rate limit profiles.
Define the function of a policy list.

---

QUESTION 1
By default, how does the router handle changes to its operational configuration?

A. Changes are not implemented, but are saved automatically.
B. Changes are not implemented and must be written into memory.
C. Changes are implemented immediately and saved automatically.
D. Changes are implemented immediately, but must be written into memory.

Answer: C

Explanation:

---

QUESTION 2
You would like to configure your PC's IP address of 10.10.0.156 as an FTP host with a username
of user and a password of mypass. Which configuration command accomplishes this goal?

A. host userpc 10.10.0.156 ftp user mypass
B. host userpc 10.10.0.156 tftp user mypass
C. hostname userpc 10.10.0.156 ftp user mypass
D. hostname userpc 10.10.0.156 tftp user mypass

Answer: A

Explanation:

---

QUESTION 3
Where should you install the spare line module in a redundancy group?

A. last slot in the chassis
B. first slot in the chassis
C. lowest numbered slot in the group
D. highest numbered slot in the group

Answer: C

Explanation:

Click here to view complete Q&A of JN0-120 exam
Certkingdom Review

Best Juniper JN0-120 Certification, Juniper JN0-120 Training at certkingdom.com

JN0-311 Juniper Networks Certified Internet Associate WX (JNCIA-WX)

JNCIA-WX Exam Objectives (Exam: JN0-311)

WX Framework Overview
Technology Overview
Name and define the various patented technologies which allow state-of-the-art compression and acceleration of WAN traffic.
Product Overview
List the WAN Acceleration Platforms and describe their differences.
Define how the WX Framework relates to Routing.

Basic Installation
Pre-installation and Configuration Considerations
List the pre-installation and configuration considerations.
Installation Tasks
Describe the procedure to connect to the Web Console or CLI.
List the steps in Quick Setup.
List common items configured to complete initial installation
Configure application definitions

Basic Configuration and Compression
Configuring Endpoints for Reduction Tunnels
Describe the procedure to verify if the Endpoints are configured properly.
Describe how to verify if the Reduction Tunnels are up and passing data.
Molecular Sequence Reduction (MSR)
Define the patented technology which allows state-of-the-art compression of WAN traffic.
Network Sequence Caching (NSC)
List the differences between MSR and NSC.

Route Learning
Discovering Local Routes
List the ways a WX device can learn routes for optimization.
Configure RIP and OSPF support.
Advertising Reduction Subnets
Define Reduction Subnets.
Configuring Reduction Filters
Describe the use of a reduction filter.

Quality of Service
Describe the components of outbound QoS.
Describe the difference between dedicated and oversubscribed WANs.
Describe the types of QoS settings that require Direct Setup.
List the reasons why you would use Bandwidth Detection.
Describe the difference between WFQ and WSP.

Packet Flow Acceleration
Examine each method of Packet Flow Acceleration (PFA).
Describe the WAN environments and applications that can benefit most from each PFA method.
Configuring Packet Flow Acceleration.

Application Flow Acceleration
Overview of Application Flow Acceleration
Describe the difference between Packet Flow Acceleration and Application Flow Acceleration.
Describe the applications supported by Application Flow Acceleration.
Common Internet File System (CIFS)
List the CIFs commands that the WX platform accelerates.
List the requirements for CIFS acceleration configuration.
Exchange and the Messaging Application Programming Interface (MAPI)
Define the Exchange and Outlook versions the WX accelerates.
HyperText Transfer Protocol (HTTP)
Define the difference between header and content caching.
Configuring AppFlow
Describe how to configure Application Flow Acceleration.

Monitoring and Reporting
Interpret reporting statistics.
List the WAN reports available on the WX and WXC platforms.
Identify the statistics of a data reduction report.
Identify the statistics of a data acceleration report.
Describe an Executive Summary report.
Identify the statistics of a QoS report.

WX Central Management System (WX CMS)
Describe the functionality of the WX CMS software.

Operation and Maintenance
Describe the security features.
Describe SNMP and DNS support.
Describe how to upgrade WXOS software and maintain configuration files.
Describe the logs and Syslog support.
List the WX network tools.

Troubleshooting
Basic Installation
Describe the error messages which indicate the WX is not cabled properly.
Basic Configuration and Compression
Name the preferred community topologies.
List the Switch-to-Wire functionality.
Route Learning
Verify proper default gateway connectivity.
Application Flow Acceleration
List the reasons why AppFlow may not be working.
Operation and Management
List the ways to export data and generate support files.
Compression
List reasons why Compression may not be working.
Packet Flow Acceleration
List reasons why Packet Flow Acceleration may not be working.

---

QUESTION 1
Which two configurations are made using the QoS Setup Wizard? (Choose two.)

A. Assign applications to traffic classes.
B. Use ToS/DSCP values for traffic classes.
C. Exclude subnets from QoS management.
D. Select dedicated vs. over-subscribed circuits.

Answer: A,D

Explanation:

---

QUESTION 2
Which three locations in WebView allow you to confirm that the endpoints are configured properly?
(Choose three.)

A. Monitor > Endpoints
B. Acceleration > Endpoints
C. Device Setup > Endpoints
D. Compression > Endpoints
E. Admin > Maintenance > Display Configuration

Answer: A,D,E

Explanation:

---

QUESTION 3
When defining an application for AppFlow acceleration, which two must be configured on the WX
device? (Choose two.)

A. Define application type.
B. Enable AppFlow for the application.
C. Enable monitoring for the application.
D. Define source and destination IP addresses.

Answer: A,B

Explanation:

---

QUESTION 4
What are three key prE.installation/configuration considerations when deploying a WX device?
(Choose three.)

A. cabling
B. community topology
C. requires a license key
D. requires two IP addresses
E. registration server designation

Answer: A,B,E

Explanation:

Click here to view complete Q&A of JN0-311 exam
Certkingdom Review

Best Juniper JN0-311 Certification, Juniper JN0-311 Training at certkingdom.com

JN0-541 Juniper Networks IDP Certified Internet Associate (JNCIA-IDP)

Concepts of intrusion detection
Identify the features and functions of an IDP sensor
Identify the use of IDP interfaces
Identify the TCP ports used by IDP sensors and Security Manager
Understanding the IDP provisioning modes

Initial configuration of an IDP sensor
Identify the steps involved in implementing the IDP sensor
Describe the configuration of a new sensor via the console
Describe the communication setup between Security Manager and IDP sensor

Configure and fine-tune policies
Assign the IDP attack terminology to the corresponding definitions
Understand the components of an IDP rule
Choice of appropriate IDP actions and IP actions
Describe the algorithm of the IDP rule assignment
Explain the use of captured packages
Explain the fine-tuning of guidelines

Configuring Other Policies for IDP
Explain the function of a rule database for exceptions
Explain the function of a rule database for anomalies
Explain the function of a rule database for backdoors
Explain the function of a SYN Protector rule database
Explain the function of honeypots in the network

Configure and use the profiler
Describe the normal functioning of a profiler
Showing the steps to a working profiler
Describe the use of a profiler for network detection
Describe the use of a profiler to identify new devices and ports
Describe the use of a profiler to detect policy violations

Sensor operation and sensor command line utility
Describe the sensor components and processes
Use scio to manage policies and display sensor configurations
Use sctop to display sensor statistics

Manage attack objects and create custom signatures
Describe the use of static and dynamic groups
Explain how to update the attack object database
List the steps for obtaining information about an attack
Understanding the purpose and use of the sensor commands "scio ccap" and "scio pcap"
List the steps for creating a simple attack object
Describe the purpose of combined attack objects

Maintenance and troubleshooting
Use the Appliance Configuration Manager (ACM) to view and modify sensor configurations
Use sensor and unix commands to resolve IDP issues
Understand the operation of external HA and NIC bypass

QUESTION 1
Which statement is true about the attack object database update process?

A. Each sensor updates its own attack object database automatically; however they must be able
to access the Juniper site on TCP port 443.
B. The attack object database update must be manually performed by the administrator, and the
administrator must manually install it on each sensor.
C. The attack object database update can be initiated manually or automatically.
D. The attack object database update can be automatically scheduled to occur using the Security
Manager GUI.

Answer: C

---

QUESTION 2
On a sensor, which command will indicate if log messages are being sent to Security Manager?

A. scio vr list
B. serviceidp status
C. scio agentstats display
D. scio getsystem

Answer: C

---

QUESTION 3
After you enable alerts for new hosts that are detected by the Enterprise Security Profiler, where
do you look in Security Manager to see those alerts?

A. Security Monitor > Profiler > Application Profiler tab
B. Security Monitor > Profiler > Violation Viewer tab
C. Security Monitor > Profiler > Network Profiler tab
D. Log Viewer > Profiler Log

Answer: D

---

QUESTION 4
When connecting to a sensor using SSH, which account do you use to login?

A. admin
B. super
C. netscreen
D. root

Answer: A

---

QUESTION 5
Which OSI layer(s) of a packet does the IDP sensor examine?

A. layers 2-7
B. layers 2-4
C. layer 7 only
D. layers 4-7

Answer: A

Click here to view complete Q&A of JN0-541 exam
Certkingdom Review

Best Juniper JN0-541 Certification, Juniper JN0-541 Training at certkingdom.com

JN0-943 Enterprise Routing and Switching, Expert

JN0-943 Enterprise Routing and Switching, Expert

At the pinnacle of the Enterprise Routing and Switching certification track is the 1-day JNCIE-ENT practical exam. This exam is designed to validate the networking professionals’ ability to deploy, configure, manage and troubleshoot Junos-based enterprise routing and switching platforms. Throughout this 8-hour practical exam, candidates will build an enterprise network infrastructure consisting of multiple routers and switching devices. Successful candidates will perform system configuration on all devices, configure protocols and features like IPV6, OSPF V2, OSPF V3, BGP, MSDP, PIM, SSM, RSTP, LLDP, 802.1x, CoS, routing policies.

The JNCIE-ENT is valid for two years. Re-certification is achieved by passing the current version of the JNCIP-ENT exam.

Exam topics may include:
System Services and Security
Interfaces
Ethernet Switching
IGPs
BGP
Protocol-Independent Routing
Multicast
Class of Service

System Services and Security
System Services
NTP
Syslog
sFlow
Authentication and authorization
Configuring archival
RPM
PoE
Securing the Control Plane
Stateless firewall configuration

Interfaces
Implementation of Interfaces
Aggregated Ethernet
VRRP
Ethernet OAM
GRE tunnels
BFD
Logical tunnel interfaces

Ethernet Switching
Spanning Tree Protocol
Multiple CIST
MSTP/VSTP/RSTP
xSTP interoperability
Multiple topologies
Optimization
VLANs
VLAN switching and trunking
Q-in-Q
IP Telephony
Private VLANs
Voice VLANs
Virtual Chassis
Master determination
Add/remove members
VCP and VCEP interfaces
Split detection
Security features
Port security features
Dynamic ARP inspection with DHCP snooping
Layer 2 firewall filters
MAC table filtering

IGPs
OSPF
Multi-area OSPF topologies
Filter and summarize routes
Network and link types
Route selection process
BFD
Redistribution
IPv6

BGP
Implementation and Troubleshooting
Routing policy
Route selection
2-byte and 4-byte AS
Multi-homed stub-AS
BFD

Protocol-Independent Routing
Load Balancing
Hash key
Per flow
Filter-based Forwarding
Based on Layer 4
Based on IFL
Configuring Routes
Aggregate
Static
Generated
Policies

Multicast
Implementation of Multicast
Shared tree and source tree
Designated router
RPF table manipulation
SSM
Extend the group range
SSM mapping
RP Redundancy
Anycast RP (PIM and MSDP)
BSR

Class of Service
Implementation
Loss priority
Rewrite rules
Shaping and policing
Scheduling
BA and MF classification
Drop profiles

Click here to view complete Q&A of JN0-943 exam
Certkingdom Review

Best Cisco JN0-943 Certification, Cisco JN0-943 Training at certkingdom.com

JN0-646 Enterprise Routing and Switching, Professional (JNCIP-ENT) Exam

JNCIP-ENT Exam Objectives (Exam: JN0-643 and JN0-646)

OSPF
Describe the concepts, operation and functionality of OSPFv2 and OSPFv3
OSPF LSA types
OSPF area types and operations
LSA flooding through an OSPF multi-area network
DR/BDR operation
SPF algorithm
Metrics, including external metric types
Authentication options
Route summarization and restriction
Overload
Virtual links
OSPFv2 vs OSPFv3
Given a scenario, demonstrate knowledge of how to configure and monitor single-area and multi-area OSPF
Implement OSPF routing policy

BGP
Describe the concepts, operation and functionality of BGP
BGP route selection process
Next hop resolution
BGP attributes - concept and operation
BGP communities
Regular expressions
Load balancing - multipath, multihop, forwarding table
NLRI families - inet, inet6
Advanced BGP options
Given a scenario, demonstrate knowledge of how to configure and monitor BGP
Implement BGP routing policy

IP Multicast
Describe the concepts, operation and functionality of IP multicast
Components of IP multicast, including multicast addressing
IP multicast traffic flow
Any-Source Multicast (ASM) vs. Source-Specific Multicast (SSM)
RPF - concept and operation
IGMP, IGMP snooping
PIM dense-mode and sparse-mode
Rendezvous point (RP) - concept, operation, discovery, election
SSM - requirements, benefits, address ranges
Anycast RP
MSDP
Routing policy and scoping
Given a scenario, demonstrate knowledge of how to configure and monitor IGMP, PIM-DM and PIM-SM (including SSM)
Implement IP multicast routing policy

Ethernet Switching and Spanning Tree
Describe the concepts, operation and functionality of advanced Ethernet switching
Filter-based VLANs
Private VLANs
Dynamic VLAN registration using MVRP
Tunnel Layer 2 traffic through Ethernet networks
Layer 2 tunneling using Q-in-Q and L2PT
Given a scenario, demonstrate knowledge of how to configure and monitor advanced Ethernet switching
Filter-based VLANs
Private VLANs
Dynamic VLAN registration using MVRP
Tunnel Layer 2 traffic through Ethernet networks
Layer 2 tunneling using Q-in-Q and L2PT
Describe the concepts, operation and functionality of advanced spanning tree protocols, including MSTP and VSTP
Given a scenario, demonstrate knowledge of how to configure and monitor MSTP and VSTP

Layer 2 Authentication and Access Control
Describe the operation of various Layer 2 authentication and access control features
Authentication process flow
802.1x - concepts and functionality
MAC RADIUS
Captive portal
Server fail fallback
Guest VLAN
Considerations when using multiple authentication/access control methods
Given a scenario, demonstration how to configure and monitor Layer 2 authentication and access control

IP Telephony Features
Describe the concepts, operation and functionality of features that facilitate IP telephony deployments
Power over Ethernet (PoE)
LLDP and LLDP-MED
Voice VLAN
Given a scenario, demonstrated how to configure and monitor features used to support IP Telephony

Class of Service (CoS)
Describe the concepts, operation and functionality of Junos CoS for Layer 2/3 networks
CoS processing on Junos devices
CoS header fields
Forwarding classes
Classification
Packet loss priority
Policers
Schedulers
Drop profiles
Shaping
Rewrite rules
Given a scenario, demonstrate knowledge of how to configure and monitor CoS for Layer 2/3 networks

Click here to view complete Q&A of JN0-646 exam
Certkingdom Review

Best Cisco JN0-646 Certification, Cisco JN0-646 Training at certkingdom.com

JN0-533 FWV, Specialist (JNCIS-FWV)

JNCIS-FWV Exam Objectives (Exam: JN0-533)

System Setup and Initial Configuration
Identify the concepts and components of ScreenOS software
Security architecture components
Packet flow and decision process
IPv6 packet handling
ScreenOS firewall/VPN product lines
System components
Demonstrate knowledge of how to configure basic elements of ScreenOS software
Interfaces
Zones
Management access and services
User accounts and authentication
Administrative lockout options
DNS configuration
NTP configuration
Describe how to configure and monitor interfaces
VLANs, aggregated Ethernet
Management interface
Bridge Group
Tunnel interfaces
Loopback interface
Interface modes
Redundant Ethernet
Identify the concepts and functionality of virtual systems (vsys)
vsys interfaces and zones
Inter-vsys routing
Profiles
CPU resource management

Layer 3 Operations
Identify the concepts and functionality of Layer 3 operations (IPv4 and IPv6)
Routing lookup flow
Virtual routers
Static and default routing
Dynamic routing - RIP, OSPF, BGP
Considerations for routing over VPNs
Route optimization and aggregation
Route redistribution; access lists and route maps
Source-based vs. policy-based routing
IPv6 modes
Demonstrate knowledge of how to configure, monitor and troubleshoot Layer 3 operations (IPv4 and IPv6)
Zones
Interfaces
IP addressing
Virtual router
Static/default routes, including floating static routes
RIP
OSPF
BGP
Redistribution
Access lists and route maps
Source-based and policy-based routing
Layer 3 verification
Layer 3 troubleshooting - get vrouter, debug, flow filter, session table

Security Policies
Identify the concepts and functionality of security policies
Zones and policies
Policy components
Policy options
Policy ordering
Policy scheduling
Global policies
Multicell policies
Address books
Policing and guaranteed bandwidth
Services
Demonstrate knowledge of how to configure, monitor and troubleshoot security policies
Address books and address groups
Services and service groups
Policy verification
Policy troubleshooting - debug, get session

NAT
Identify the concepts and functionality of NAT
Interface-based vs. policy-based NAT
NAT type usage
Source NAT (NAT-src)
Dynamic IP addresses (DIP)
Destination NAT (NAT-dst)
Virtual IP addresses (VIP)
Mapped IP addresses (MIP)
Precedence
Demonstrate knowledge of how to configure, monitor and troubleshoot NAT
Policy-based NAT
Dynamic IP addresses (DIP)
Reachability/Routing
VIP and MIP
NAT verification
NAT troubleshooting - debug, get session, and traffic logs

IPsec VPNs
Identify the concepts and functionality of IPsec VPNs
Secure VPN characteristics and components
Encapsulating Security Payload (ESP)
Authentication Header (AH)
IPsec tunnel establishment - Internet Key Exchange (IKE)
Hub-and-spoke IPsec VPNs
Policy-based vs. route-based IPsec VPNs
Next-hop tunnel binding (NHTB)
Next Hop Resolution Protocol (NHRP)
Fixed vs. dynamic peers
Tunnel interfaces
Preshared keys
VPN Monitor
Demonstrate knowledge of how to configure, monitor and troubleshoot IPsec VPNs
Interfaces
Objects
IKE
Policy
Routing
VPN Monitor
IPsec VPN verification
IPsec VPN troubleshooting - system/event log, debug, get ike, get sa

High Availability
Identify the concepts and requirements for high availability (HA) in a ScreenOS firewall/VPN environment
NetScreen Redundancy Protocol (NSRP) characteristics
NSRP modes; usage guidelines
Links, ports and zones
Virtual security device (VSD), virtual security interfaces (VSI) and VSD groups
VSD states
Run-time objects (RTOs)
HA probes
Failover tuning
IP tracking
Virtual Router Redundancy Protocol (VRRP)
Redundant interfaces
Links between the firewalls
Redundant VPN gateways
Demonstrate knowledge of how to configure, monitor and troubleshoot HA
HA link
Cluster settings
Interfaces
VSD settings
RTO synchronization
Tracking and monitoring
Redundant interface
HA verification
HA monitoring for VPNs - IKE heartbeats, dead peer detection
HA troubleshooting - debug, get interface, get nsrp stats

Attack Prevention
Describe the purpose, configuration and operation of Screens
Attack types and phases
Screen options
Best practices
Configuration, verification and troubleshooting
Describe the purpose, configuration and operation of deep inspection (DI)
Attack object database
Custom attack objects
Signature database update methods
DI policies and actions
Licensing
Configuration, verification and troubleshooting
Describe the purpose, configuration and operation of Unified Threat Management (UTM)
Antispam profiles
Actions
Spam block list (SBL)
Antivirus scanning methods and options
Antivirus flow process
Licensing
Web filtering features and solutions
Data flow
Search order
White lists, black lists and categories
Configuration, verification and troubleshooting

System Administration, Management and Monitoring
Demonstrate knowledge of how to manage and monitor a ScreenOS firewall/VPN environment
File management
Password recovery
Licensing
Logs
Syslog
SNMP
Alarms
Counters

---

QUESTION 1
Which ScreenOS security feature helps protect against port scans and denial of service attacks?

A. session-based stateful firewall
B. IPsec VPNs
C. security policies
D. Screen options

Answer: B

Explanation:

---

QUESTION 2
What is the initial default username and password for all ScreenOS devices?

A. administrator/password
B. root/password
C. netscreen/netscreen
D. admin/netscreen1

Answer: D

Explanation:

---

QUESTION 3
What is a virtual system?

A. a mechanism to logically partition a single ScreenOS device into multiple logical devices
B. a collection of subnets and interfaces sharing identical security requirements
C. a method of providing a secure connection across a network
D. a tool to protect against DoS attacks

Answer: C

Explanation:

---

QUESTION 4
What is a zone?

A. a set of rules that controls traffic from a specified source to a specified destination using a
specified service
B. a collection of subnets and interfaces sharing identical security requirements
C. a method of providing a secure connection across a network
D. a tool to protect against DoS attacks

Answer: C

Explanation:

---

QUESTION 5
What is the function of NAT?

A. It performs Layer 3 routing.
B. It evaluates and redirects matching traffic into secure tunnels.
C. It provides translation between IP addresses.
D. It performs Layer 2 switching.

Answer: B

Explanation:

Click here to view complete Q&A of JN0-533 exam
Certkingdom Review

Best Cisco JN0-533 Certification, Cisco JN0-533 Training at certkingdom.com