[Dec-2021] Junos Security JN0-635 Exam Practice Dumps
2021 JN0-635 Premium Files Test pdf - Free Dumps Collection
Recertification Details
You can recertify for the JNCIP-SEC through testing by passing the relevant professional-level exam, by nailing the expert-level exam to advance the certification level, or by attending courses by Juniper Networks or any Juniper Networks Authorized Education Partners. If you pass an exam or take a course that is at a higher level than the certification you opt to recertify, you can renew all lower-level designations within that certification track. For example, if you recertify the expert-level JNCIE-SEC certification either through testing or by a course, you would have effectively recertified the lower-level security certificates including the JNCIP-SEC, JNCIS-SEC, and JNCIA-SEC. This recertification is valid for another three years from the time you passed the recertification exam or course. If you fail to recertify by the end of the active period, you will have to re-earn the certification from scratch.
NEW QUESTION 52
You are asked to implement the session cache feature on an SRX5400.
In this scenario, what information does a session cache entry record? (Choose two.)
- A. To which NPU the traffic of the session should be forwarded
- B. To which SPU the traffic of the session should be forwarded
- C. The type of processing to do for ingress traffic
- D. The type of processing to do for egress traffic
Answer: B,D
NEW QUESTION 53
Your organization has multiple Active Directory domain to control user access. You must ensure that security polices are passing traffic based upon the user's access rights.
What would you use to assist your SRX series devices to accomplish this task?
- A. Junos Space
- B. JIMS
- C. JSA
- D. JATP Appliance
Answer: B
Explanation:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-user-auth-configure-jims.html
NEW QUESTION 54
Click the Exhibit button.
Given the command output shown in the exhibit, which two statements are true? (Choose two.)
- A. The host 10.10.101.10 is directly connected to interface ge-0/0/4.0
- B. Network Address Translation is applied to this session
- C. Traffic matching this session has been received since the session was established
- D. The host 172.31.15.1 is directly connected to interface ge-0/0/3.0
Answer: A,C
NEW QUESTION 55
According to the log shown in the exhibit, you notice the IPsec session is not establishing.
What is the reason for this behavior?
- A. Mismatched proxy ID
- B. Mismatched preshared key
- C. Mismatched peer ID
- D. Incorrect peer address.
Answer: C
Explanation:
Reference:
https://www.juniper.net/documentation/en_US/release-independent/nce/topics/example/policy-based-vpn-using-j-series-srxseries-device-configuring.html
NEW QUESTION 56
You are asked to secure your network against TOR network traffic.
Which two Juniper products would accomplish this task? (Choose two.)
- A. Juniper Sky ATP
- B. Contrail Insights
- C. Juniper ATP Appliance
- D. Contrail Edge
Answer: A,C
NEW QUESTION 57
You are asked to look at a configuration that is designed to take all traffic with a specific source ip address and forward the traffic to a traffic analysis server for further evaluation. The configuration is no longer working as intended.
Referring to the exhibit which change must be made to correct the configuration?
- A. Apply the filter as in output filter on interface xe-0/1/0.0
- B. Create a routing instance named default
- C. Apply the filter as in input filter on interface xe-0/2/1.0
- D. Apply the filter as in input filter on interface xe-0/0/1.0
Answer: D
NEW QUESTION 58
Click the Exhibit button.
A host is unable to communicate with a webserver. Referring to the exhibit, which statement is correct?
- A. A session is created for this flow
- B. The webserver is not listening for traffic on port 80
- C. The session table is running out of resources
- D. A policy is denying the traffic between these two hosts
Answer: D
NEW QUESTION 59
Click the Exhibit button.
You are implementing a new branch site and want to ensure Internet traffic is sent directly to your ISP and other traffic is sent to your company headquarters. You have configured filter-based forwarding to accomplish this objective. You verify proper functionality using the outputs shown in the exhibit.
Which two statements are true in this scenario? (Choose two.)
- A. The session utilizes two routing instances
- B. The ge-0/0/5 and ge-0/0/1 interfaces must reside in a single security zone
- C. The session utilizes one routing instance
- D. The ge-0/0/5 and ge-0/0/1 interfaces can reside in different security zones
Answer: C,D
NEW QUESTION 60
Malware that is detonated by the JATP sandbox must be able to communicate with the Internet without being able to harm your local network resources.
Which statement is correct in this scenario?
- A. The exhaust interface must be connected to the Internet zone
- B. The management interface must be connected to the Internet zone
- C. The monitoring interface must be connected to the Internet zone
- D. The honeypot interface must be connected to the Internet zone
Answer: B
NEW QUESTION 61
Your SRX Series device does not see the SYN packet.
What is the default action in this scenario?
- A. The device will forward the subsequent packets and the session will be established
- B. The device will forward the subsequent packets and the session will not be established
- C. The device will drop the subsequent packets and the session will be established
- D. The device will drop the subsequent packets and the session will not be established
Answer: D
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-tcp-session- checks.html
NEW QUESTION 62
Click the Exhibit button.
Which type of NAT is shown in the exhibit?
- A. persistent NAT
- B. NAT46
- C. NAT64
- D. DS-Lite
Answer: C
NEW QUESTION 63
Click the Exhibit button.
You have two hosts on the same subnet connecting to an SRX340 on interfaces ge-0/0/4 and ge-0/0/5.
However, the two hosts cannot communicate with each other.
Referring to the exhibit, what are two actions that would solve this problem? (Choose two.)
- A. Add an IRB interface to the VLAN
- B. Remove the ge-0/0/4 and ge-0/0/5 interfaces from the L2 security zone
- C. Put the ge-0/0/4 and ge-0/0/5 interfaces in different VLANs
- D. Set the SRX340 to Ethernet switching mode and reboot
Answer: B,D
NEW QUESTION 64
Click the Exhibit button.
Referring to the exhibit, which IPS deployment mode is running on the SRX5800 device?
- A. in-line tap mode
- B. monitor mode
- C. sniffer mode
- D. integrated mode
Answer: D
NEW QUESTION 65
What are two important function of the Juniper Networks ATP appliance solution? (Choose two.).
- A. Detection
- B. Statistics
- C. Analysis
- D. Filtration
Answer: A,C
Explanation:
Reference:
https://www.juniper.net/us/en/products-services/security/advanced-threat-prevention/
NEW QUESTION 66
Which two log format types are supported by the JATP appliance? (Choose two.)
- A. CSV
- B. YAML
- C. YANG
- D. XML
Answer: A,D
Explanation:
Reference:
https://www.juniper.net/documentation/en_US/release-independent/jatp/topics/topic-map/jatp-custom-log-ingestion.html
NEW QUESTION 67
Which two VPN features are supported with CoS-based IPsec VPNs? (Choose two.)
- A. VPN monitoring
- B. IKEv1
- C. IKEv2
- D. dead peer detection
Answer: C,D
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/secuirty-cos-based-ipsec- vpns.html
NEW QUESTION 68
You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restricted to the VLANs from which they originate.
Which configuration accomplishes these objectives?
- A.
- B.
- C.
- D.
Answer: A
Explanation:
Explanation/Reference: https://www.oreilly.com/library/view/juniper-srx-series/9781449339029/ch06.html
NEW QUESTION 69
When would you use the port-overloading-factor 1setting?
- A. to map ports with 1:1 ratio for port-overloading
- B. to set the maximum port-overloading capacity to 65,536
- C. to enable the port-overloading
- D. to disable the port-overloading
Answer: D
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/ security-edit-port-overloading-interface-source-nat.html
NEW QUESTION 70
How does secure wire mode differ from transparent mode?
- A. In secure wire mode, no switching lookup takes place to forward traffic
- B. In secure wire mode, security policies cannot be used to secure intra-VLAN traffic
- C. In secure wire mode, traffic can be modified using source NAT
- D. In secure wire mode, IRB interfaces can be configured to route inter-VLAN traffic
Answer: A
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-secure-wire.html
NEW QUESTION 71
Click the Exhibit button.
You are asked to look at a configuration that is designed to take all traffic with a specific source IP address and forward the traffic to a traffic analysis server for further evaluation. The configuration is not working as intended.
Referring to the exhibit, which change must be made to correct the configuration?
- A. Create a routing instance named default
- B. Apply the filter as an input filter on interface xe-0/2/1.0
- C. Apply the filter as an output filter on interface xe-0/1/0.0
- D. Apply the filter as an input filter on interface xe-0/0/1.0
Answer: D
NEW QUESTION 72
Click the Exhibit button.
A host is unable to communicate with a webserver. Referring to the exhibit, which statement is correct?
- A. A session is created for this flow
- B. The webserver is not listening for traffic on port 80
- C. The session table is running out of resources
- D. A policy is denying the traffic between these two hosts
Answer: D
NEW QUESTION 73
Click the Exhibit button.
A user is trying to reach a company's website, but the connection errors out. The security policies are configured correctly.
Referring to the exhibit, what is the problem?
- A. Persistent NAT must be enabled
- B. DNS ALG must be disabled
- C. Static NAT is missing a rule for DNS server
- D. The action for rule 1 must change to static-nat inet
Answer: C
Explanation:
Explanation
NEW QUESTION 74
......
Get ready to pass the JN0-635 Exam right now using our Junos Security Exam Package: https://www.easy4engine.com/JN0-635-test-engine.html
A fully updated 2021 JN0-635 Exam Dumps exam guide from training expert Easy4Engine: https://drive.google.com/open?id=1wc6VKB_pGIBpfGxsxDr6qipCrJGmToqZ
