JN0-636 by Juniper Actual Free Exam Questions And Answers

Question 1

Which two additional configuration actions are necessary for the third-party feed shown in the exhibit to work properly? (Choose two.)

A. You must apply the dynamic address entry in a security policy.

B. You must create a dynamic address entry with the C&C category and the cc_offic365 value.

C. You must create a dynamic address entry with the IP filter category and the ipfilter_office365 value.

D. You must apply the dynamic address entry in a security intelligence policy.

Discussion 0

Correct Answer: A,C Vote an answer

Question 2

You are asked to detect domain generation algorithms
Which two steps will accomplish this goal on an SRX Series firewall? (Choose two.)

A. Define an advanced-anti-malware policy under [edit services].

B. Define a security-metadata-streaming policy under [edit

C. Attach the advanced-anti-malware policy to a security policy.

D. Attach the security-metadata-streaming policy to a security

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

You have the NAT rule, shown in the exhibit, applied to allow communication across an IPsec tunnel between your two sites with identical networks. Which statement is correct in this scenario?

A. The NAT rule in applied to the N/A routing instance.

B. The NAT rule with translate the source and destination addresses.

C. 10 packets have been processed by the NAT rule.

D. The NAT rule will only translate two addresses at a time.

Discussion 0

Correct Answer: B Vote an answer

Question 4

Which two features would be used for DNS doctoring on an SRX Series firewall? (Choose two.)

A. static NAT

B. source NAT

C. The DNS ALG must be disabled.

D. The DNS ALG must be enabled.

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

Exhibit

You are using traceoptions to verify NAT session information on your SRX Series device. Referring to the exhibit, which two statements are correct? (Choose two.)

A. This is the last packet in the session.

B. This is the first packet in the session.

C. The SRX Series device is performing both source and destination NAT on this session.

D. The SRX Series device is performing only source NAT on this session.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)

A. The data that traverses the ge-0/070 interface is secured by a secure association key.

B. The data that traverses the ge-070/0 interface can be intercepted and read by anyone.

C. The data that traverses the ge-O/0/0 interface is secured by a connectivity association key.

D. The data that traverses the ge-070/0 interface cannot be intercepted and read by anyone.

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Juniper Security, Professional (JNCIP-SEC) - JN0-636 Exam Practice Test

Contact Us

Useful Links

Latest Updated