Juniper JN0-633 Online Practice Questions and Exam Preparation

Juniper JN0-633 Online Questions & Answers

• Question 1:

  An SRX Series device is configured for inline tap mode. What will occur if Drop Packet is selected?

  A. The SRX Series device drops a matching packet before it can reach its destination but does not close the connection.
  B. The SRX Series device will ignore the action Drop Packet.
  C. The SRX Series device closes the connection and sends an RST packet to both the client and the server.
  D. The SRX Series device drops a matching packet associated with the connection, preventing traffic for the connection from reaching its destination.
  D. The SRX Series device drops a matching packet associated with the connection, preventing traffic for the connection from reaching its destination.

• Question 2:

  Click the Exhibit button.

  user@key-server> show security group-vpn server ike security-associations Index State Initiator cookie Responder cookie Mode Remote Address 97 UP bb224408940cc5d 435b9404284083c2 Main 192.168.11.1 98 UP 242c840089404d15 ab19284089408ba8 Main 192.168.11.2

  user@key-server> show security group-vpn server ipsec security-associations Group: group-1, Group Id: Total IPsec SAs: 1 IPsec SA Algorithm SPI Lifetime group-l-sa ESP:3des/shal 1343991c 2736 Group: group-2, Group id: 2 Total IPsec SAs: 1 IPsec SA Algorithm SPI Lifetime group-2-sa ESP:3des/shal 13be9e9 2741 Group: group-3, Group Id: 3 Total IPsec SAs: 1 IPsec SA Algorithm SPI Lifetime group-3-sa ESP:3des/shal 20709057 2741 Group: group-4, Group Id: 4 Total IPsec SAs: 1 IPsec SA Algorithm SPI Lifetime group-4-sa ESP:3des/shal 5111c2e1 2741

  Which statement is correct regarding the outputs shown in the exhibit?

  Which statement is correct regarding the outputs shown in the exhibit?

  A. Two established peers are in the group VPNs.
  B. One established peer is in the group VPNs.
  C. No established peer is in the group VPNs.
  D. Four established peers are in the group VPNs.
  A. Two established peers are in the group VPNs.

• Question 3:

  You have initiated the download of the IPS signature database on your SRX Series device. Which command would you use to confirm the download has completed?

  A. request security idp security-package install
  B. request security idp security-package download
  C. request security idp security-package install status
  D. request security idp security-package download status
  D. request security idp security-package download status

• Question 4:

  You are asked to secure your company's Web presence. This includes using an SRX Series device to inspect SSL traffic going to the Web servers in your DMZ. Which two actions are required to accomplish this task? (Choose two.)

  A. Load your Web server's private key in the IDP configuration.
  B. Load your Web server's public key in the IDP configuration.
  C. Generate a root certificate on the SRX Series device for your Web servers.
  D. Specify the number of sessions in the SSL sensor configuration.
  A. Load your Web server's private key in the IDP configuration.
  D. Specify the number of sessions in the SSL sensor configuration.

• Question 5:

  What are two configurable routing instance types? (Choose two.)

  A. IPsec
  B. VPLS
  C. GRE
  D. VRF
  B. VPLS
  D. VRF

• Question 6:

  In the IPS packet processing flow on an SRX Series device, when does application identification occur?

  A. before fragmentation processing
  B. after protocol decoding
  C. before SSL decryption
  D. after attack signature matching
  A. before fragmentation processing

• Question 7:

  You are asked to ensure traffic from your executive staff does not use the same ISP connection as your other traffic. Which three actions are required to accomplish this task? (Choose three)

  A. Create a firewall filter to match this traffic and send this traffic to the routing instance.
  B. Create a routing instance and define the type as no-forwarding.
  C. Assign the outgoing interface to the no-forwarding instance.
  D. Create a routing instance and define the type as forwarding.
  E. Create a RIB group to share routes between the main instance and the routing instance.
  A. Create a firewall filter to match this traffic and send this traffic to the routing instance.
  D. Create a routing instance and define the type as forwarding.
  E. Create a RIB group to share routes between the main instance and the routing instance.

• Question 8:

  Which configurable SRX Series device feature allows you to capture transit traffic?

  A. syslog
  B. traceoptions
  C. packet-capture
  D. archival
  B. traceoptions

• Question 9:

  What are three techniques to mark DSCP values on an SRX Series device? (Choose three.)

  A. IDP attack action-based DSCP rewriters
  B. 802.11Q
  C. VLAN rewrite
  D. ALG-based DSCP rewriters
  E. Layer 7 application-based DSCP rewriters.
  A. IDP attack action-based DSCP rewriters
  D. ALG-based DSCP rewriters
  E. Layer 7 application-based DSCP rewriters.

• Question 10:

  Click the Exhibit button.

  root@host# show system login

  user user {

  uid 2000;

  class operator;

  authentication {

  encrypted-password "$1$4s7ePrk5$9S.MZTwmXTV7sovJZFFsw1"; ## SECRET-DATA ]

  }

  An SRX Series device has been configured for multiple certificate-based VPNs. The IPsec security association used for data replication is currently down . The administrator is a contractor and has the permissions on the SPX Series device

  as shown in the exhibit

  Which command set would allow the administrator to troubleshoot the cause for the VPN being down?

  A. set security ipsec traceoptions file ipsec set security ipsec traceoptions flag security-associations
  B. set security ike traceoptions file ike set security ike traceoptions flag ike
  C. request security pki verify-integrity-status
  D. request security ike debug-enable local remote
  C. request security pki verify-integrity-status