Juniper JPR-961 Exam (page: 2)
Juniper Networks Certified Internet Expert
Updated on: 25-Dec-2025

Viewing Page 2 of 14

You are a network administrator for your company. The company network consists of two Active Directory forests. Verigon.com is the single-domain forest that contains all user accounts and resources for the corporate network, except the resources that are allocated to the Development department. Dev.corp is the single-domain forest that is used only by the Development department. You configure an external trust between the two domains.

Developers must be able to log on from their computers to the verigon.com domain. In the verigon.com forest, you create a new user principal name (UPN) suffix of dev.corp and configure UPNs for the developers' user accounts in the verigon.com domain with this suffix. Developers report that they cannot log on to the verigon.com domain from their computers, which belong to the dev.corp domain, by using their UPNs. You must enable developers to log on to the verigon.com domain from their computers by using UPNs.
What should you do?

  1. Replace the external trust with a forest trust.
  2. Change the UPN suffix for the developers' user accounts to verigon.com.
  3. Configure selective authentication on the trust.
  4. Configure domain-wide authentication on the trust.

Answer(s): A



You are the administrator for your company's network. Your company's logical network design consists of a single Active Directory domain. All servers have the Windows Server operating system installed. All client computers run Windows XP Professional.

Woody is the manager for the company. He uses his client computer to read and edit large documents from the publishing department. The computer is configured with a single basic disk consisting of two partitions. One partition is used as the boot and system partition. The other partition hosts user data folders. Both partitions are formatted using NTFS. The user data partition contains shared folders and files that use both share and NTFS permissions to grant access to employees in the editorial department.

Woody informs you that his computer is beginning to perform at a speed that is moderately slower than other client computers in the editorial department. You use System Monitor and discover that a disk bottleneck exists. How can Woody improve performance on this computer?

  1. Defragment the hard disk.
  2. Reformat the data partition using FAT32.
  3. Convert the hard disk to a dynamic disk.
  4. Delete the two existing partitions on the hard disk, and create a single partition.

Answer(s): A



You are your company's network administrator. The network consists of a single subnet. All servers run Windows Server. The network is connected to the Internet through a private WAN link. A computer named Server1 provides Internet access for the network. Server1 is equipped with two NICs, and Internet Connection Sharing (ICS) is enabled on the NIC that is connected to the Internet.
Your company employs several telecommuters who work from their homes. The remote employees require some files that contain information about the company's business operations. Those files are updated on a daily basis. To provide the remote employees with those files, you set up an FTP site on a computer named FTPSrv.

You must ensure that the users on the corporate network can access Internet Web sites and that the remote employees can download the necessary files from FTPSrv. The corporate network must be protected against possible Internetbased attacks. Access to the corporate network from the Internet must be restricted to only the FTP site on FTPSrv.
What should you do?

  1. On FTPSrv, enable Internet Connection Firewall, and specify that FTP traffic be allowed to pass to FTPSrv.
  2. On Server1, enable Internet Connection Firewall, and specify that FTP traffic be allowed to pass to FTPSrv.
  3. Configure Server1 to use IPSec for all communications on the NIC that is connected to the Internet.
  4. On Server1, enable Internet Connection Firewall, and configure it to allow only HTTP and FTP traffic to pass to the corporate network.

Answer(s): B



Mark works as a Network Administrator for ABC.com. The company has a Windows single domain-based Active Directory network. The network has five Windows member servers and 200 Windows XP Professional client computers. The network has a Windows Server that works as a DNS server. The DNS server contains the following types of resource records:
-Name Server (NS) resource record
-A resource record
-PTR resource record
-SRV resource record
-MX resource record

Mark updates the A resource record.
Which of the following types of resource records can be associated with the A resource record and needs to be updated?

  1. The associated PTR resource record needs to be updated.
  2. The associated SRV resource record needs to be updated.
  3. The associated MX resource record needs to be updated.
  4. The associated NS resource record needs to be updated.

Answer(s): A



Andrew works as a Network Administrator for ABC.com. The company has a Windows domain-based network. The company has two Windows servers and 150 Windows Professional client computers. The company has a Windows server named NATSERV that has a dial-up connection to the Internet.
NATSERV has two network interfaces named EthernetA and EthernetB .
EthernetA is connected to the LAN and has an IP address of 192.168.1.121. EthernetB is connected to the Internet and has an IP address of 132.103.102.71. The client computers on the LAN connect to the Internet by using NATSERV. NAT also has Routing and Remote Access installed.
Andrew enables the NAT/Basic Firewall routing protocol on NATSERV. The configuration of the NAT/Basic Firewall routing on NATSERV is shown in the image below:



The client computers on the network are unable to connect to the Internet.
When Andrew tries to ping 132.103.102.71 from the client computers on the local network, he receives a message as shown in the image below:

Andrew wants to ensure that the client computers on the local network are able to connect to the Internet.
What will he do to accomplish this?
Each correct answer represents a part of the solution. (Choose two.)

  1. For EthernetB, configure Outbound Filters under Static packet filters.
  2. For EthernetA, configure Inbound Filters under Static packet filters.
  3. For EthernetA, configure NAT/Basic Firewall as 'Private interface connected to private network'.
  4. For EthernetB, configure NAT/Basic Firewall as 'Public interface connected to the Internet'.

Answer(s): C,D



Viewing Page 2 of 14



Share your comments for Juniper JPR-961 exam with other users:

Anonymous User 2/2/2024 6:42:12 PM

Upload this exam please!
Anonymous