Juniper JN0-633 Online Practice Questions and Exam Preparation

Juniper JN0-633 Online Questions & Answers

• Question 141:

  You are asked to secure your company's Web presence. This includes using an SRX Series device to inspect SSL traffic going to the Web servers in your DMZ. Which two actions are required to accomplish this task? (Choose two.)

  A. Load your Web server's private key in the IDP configuration.
  B. Load your Web server's public key in the IDP configuration.
  C. Generate a root certificate on the SRX Series device for your Web servers.
  D. Specify the number of sessions in the SSL sensor configuration.
  A. Load your Web server's private key in the IDP configuration.
  D. Specify the number of sessions in the SSL sensor configuration.

• Question 142:

  Which statement is true about NAT?

  A. When you implement destination NAT, the router does not apply ALG services.
  B. When you implement destination NAT, the router skips source NAT rules for the initiating traffic flow.
  C. When you implement static NAT, each packet must go through a route lookup.
  D. When you implement static NAT, the router skips destination NAT rules for the initiating traffic flow.
  D. When you implement static NAT, the router skips destination NAT rules for the initiating traffic flow.

• Question 143:

  Which two are required for the SRX device to perform DNS doctoring? (Choose two.)

  A. DNS ALG
  B. dns-doctoring stanza
  C. name-server
  D. static NAT
  A. DNS ALG
  D. static NAT

• Question 144:

  Two companies, A and B, are connected as separate customers on an SRX5800 residing on two virtual routers (VR-A and VR-B). These companies have recently been merged and now operate under a common IT security policy. You have been asked to facilitate communication between these VRs. Which two methods will accomplish this task? (Choose two.)

  A. Use instance-import to share the routes between the two VRs.
  B. Create logical tunnel interfaces to interconnect the two VRs.
  C. Use a physical connection between VR-A and VR-B to interconnect them.
  D. Create a static route using the next-table action in both VRs.
  A. Use instance-import to share the routes between the two VRs.
  D. Create a static route using the next-table action in both VRs.

• Question 145:

  Click the Exhibit button.

  In the network shown in the exhibit, you want to forward traffic from the employees to ISP1 and ISP2. You want to forward all Web traffic to ISP1 and all other traffic to ISP2. However, your configuration is not producing the expected results.

  Part of the configuration is shown in the exhibit. When you run the show route table isp1 command, you do not see the default route listed.

  What is causing this behavior?

  Exhibit:

  

  A. The autonomous system number is incorrect, which is preventing the device from receiving a default route from ISP1.
  B. The device is not able to resolve the next-hop.
  C. The isp1 routing instance is configured with an incorrect instance-type.
  D. The show route table isp1 command does not display the default route unless you add the exact 0.0.0.0/0 option.
  B. The device is not able to resolve the next-hop.

• Question 146:

  Which statement is true regarding dual-stack lite?

  A. The softwire is an IPv4 tunnel over an IPv6 network.
  B. The softwire initiator (SI) encapsulates IPv6 packets in IPv4.
  C. The softwire concentrator (SC) decapsulates softwire packets.
  D. SRX devices support the softwire concentrator and softwire initiator functionality.
  C. The softwire concentrator (SC) decapsulates softwire packets.

• Question 147:

  At which two times does the IPS rulebase inspect traffic on an SRX device? (Choose two.)

  A. When traffic matches the active IDP policy.
  B. When traffic first matches an IDP rule with the terminal parameter.
  C. When traffic uses the application layer gateway.
  D. When traffic is established in the firewall session table.
  A. When traffic matches the active IDP policy.
  B. When traffic first matches an IDP rule with the terminal parameter.

• Question 148:

  -- Exhibit -user@srx240< show route summary Router ID. inet.0: 3 destinations, 3 routes (3 active, 0 holddown, 0 hidden) Direct: 1 routes, 1 active Local: 1 routes, 1 active StatiC. 1 routes, 1 active customer-A.inet.0: 3 destinations, 3 routes (3 active, 0 holddown, 0 hidden) Direct: 1 routes, 1 active Local: 1 routes, 1 active StatiC. 1 routes, 1 active customer-B.inet.0: 4 destinations, 4 routes (4 active, 0 holddown, 0 hidden) Direct: 1 routes, 1 active Local: 1 routes, 1 active OSPF. 1 routes, 1 active StatiC. 1 routes, 1 active customer-B.inet6.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden) Direct: 2 routes, 2 active Local: 2 routes, 2 active StatiC. 1 routes, 1 active -- Exhibit -

  In the output, how many user-configured routing instances have active routes?

  A. 1
  B. 2
  C. 3
  D. 4
  B. 2

• Question 149:

  Click the Exhibit button.

  Referring to the topology shown in the exhibit, which two configuration tasks will allow Host A to telnet to the public IP address associated with Server B? (Choose two.)

  Exhibit:

  

  A. Configure transparent mode to bypass the NAT processing of Server B's public IP address.
  B. Configure a stateless filter redirecting local traffic destined to Server B's public IP address.
  C. Configure a destination NAT rule that matches local traffic destined to Server B's public IP address.
  D. Configure a source NAT rule that matches local traffic destined to Server B's public IP address.
  C. Configure a destination NAT rule that matches local traffic destined to Server B's public IP address.
  D. Configure a source NAT rule that matches local traffic destined to Server B's public IP address.

• Question 150:

  You are asked to ensure traffic from your executive staff does not use the same ISP connection as your other traffic. Which three actions are required to accomplish this task? (Choose three)

  A. Create a firewall filter to match this traffic and send this traffic to the routing instance.
  B. Create a routing instance and define the type as no-forwarding.
  C. Assign the outgoing interface to the no-forwarding instance.
  D. Create a routing instance and define the type as forwarding.
  E. Create a RIB group to share routes between the main instance and the routing instance.
  A. Create a firewall filter to match this traffic and send this traffic to the routing instance.
  D. Create a routing instance and define the type as forwarding.
  E. Create a RIB group to share routes between the main instance and the routing instance.