Juniper JN0-633 Online Practice Questions and Exam Preparation

Juniper JN0-633 Online Questions & Answers

• Question 151:

  What are two AppSecure modules? (Choose two.)

  A. AppDoS
  B. AppFlow
  C. AppTrack
  D. AppNAT
  A. AppDoS
  C. AppTrack

• Question 152:

  In the IPS packet processing flow on an SRX Series device, when does application identification occur?

  A. before fragmentation processing
  B. after protocol decoding
  C. before SSL decryption
  D. after attack signature matching
  A. before fragmentation processing

• Question 153:

  Click the Exhibit button.

  userehost# run show route inet.0: 4 destinations, 4 routes (4 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 0.0.0.0/0 *[Static/5] 00:05:06 > to 172.16.1.1 via ge-0/0/1.0 172.16.1.0/24 *[Direct/O] 00:05:06 > via ge-0/0/1.0 172.16.1.3/32 *[Local/0] 00:05:07 Local via ge-0/0/1.0 192.168.200.2/32 *[Local/0] 00:05:07 Reject

  vr-a.inet.0: 2 destinations, 2 routes (2 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both

  192.168.1.0/24 *[Direct/0] 00:01:05 > via ge-0/0/2.0 192.168.1.1/32 *[Local/0] 00:01:05 Local via ge-0/0/2.0

  vr-b.inet.0: 2 destinations, 2 routes (2 active, 0 holddcwn, 0 hidden) + = Active Route, - = Last Active, * = Both

  192.168.1.0/24 *[Direct/O] 00:01:05 > via go-0/0/3.0 192.168.1.1/32 *[Local/0] 00:01:05 Local via ge-0/0/3.0

  User 1 will access Server 1 using IP address 10.2.1.1. You need to ensure that return traffic is able to reach User 1 from Server 1.

  Exhibit:

  

  A. [edit security nat static] user@host# show rule-set server-nat { from zone [ untrust ]; rule 1 { match { destination-address 10.2.1.1/32; } then { static-nat { prefix { 192.168.1.2/32; } } } } }
  B. [edit security nat static] user@host# show rule-set server-nat { from zone [ junos-host untrust ]; rule 1 { match { destination-address 10.2.1.1/32; } then { static-nat { prefix { 192.168.1.2/32; routing-instance vr-b; } } } } }
  C. [edit security nat static] user@host# show rule-set server-nat { from zone untrust; rule 1 { match { destination-address 10.2.1.1/32; } then { static-nat { prefix { 192.168.1.2/32; routing-instance vr-a; } } } } }
  D. [edit security nat static] user@host# show rule-set in { from zone untrust; to zone cust-a; rule overload { match { source-address 0.0.0.0/0; } then { source-nat { interface; } } } }
  B. [edit security nat static] user@host# show rule-set server-nat { from zone [ junos-host untrust ]; rule 1 { match { destination-address 10.2.1.1/32; } then { static-nat { prefix { 192.168.1.2/32; routing-instance vr-b; } } } } }

• Question 154:

  What are two configurable routing instance types? (Choose two.)

  A. IPsec
  B. VPLS
  C. GRE
  D. VRF
  B. VPLS
  D. VRF

• Question 155:

  Your company's network has seen an increase in Facebook-related traffic. You have been asked to restrict the amount of Facebook-related traffic to less than 100 Mbps regardless of congestion. What are three components used to accomplish this task? (Choose three.)

  A. IDP policy
  B. application traffic control
  C. application firewall
  D. security policy
  E. application signature
  B. application traffic control
  D. security policy
  E. application signature

• Question 156:

  As an SRX administrator, you must find all encrypted sessions on an SRX Series device. Which command would you use to accomplish this task?

  A. show security flow session tunnel
  B. show security ike tunnel-map
  C. show security ike security-associations
  D. show security flow session encrypted
  D. show security flow session encrypted

• Question 157:

  You have configured an IPsec VPN with traffic selectors; however, your IPsec tunnel does not appear to be working properly.

  What are two reasons for the problem? (Choose two.)

  A. You are configured a remote address value of 0.0.0.0/0.
  B. You are trying to use traffic selectors with policy-based VPNs.
  C. You have configured 15 traffic selectors on each SRX Series device.
  D. You are trying to use traffic selectors with route-based VPNs.
  A. You are configured a remote address value of 0.0.0.0/0.
  B. You are trying to use traffic selectors with policy-based VPNs.

• Question 158:

  Click the Exhibit button.

  Referring to the exhibit, the session close log was generated by the application firewall rule set HTTP.

  Why did the session close?

  Exhibit:

  

  A. The application identification engine was unable to determine which application was in use, which caused the SRX device to close the session.
  B. The host with the IP address of 192.168.1.123 received a TCP segment with the FIN flag set from the host with the IP address of 65.197.244.218.
  C. The SRX device was unable to determine the user and role in the allotted time, which caused the session to close.
  D. The host with the IP address of 192.168.1.123 sent a TCP segment with the FIN flag set to the host with the IP address of 65.197.244.218.
  D. The host with the IP address of 192.168.1.123 sent a TCP segment with the FIN flag set to the host with the IP address of 65.197.244.218.

• Question 159:

  You are asked to implement a Dynamic IPsec VPN on your new SRX240. You are required to facilitate up to 5 simultaneous users.

  Which two statements must be considered when accomplishing the task?

  A. You must acquire at least three additional licenses.
  B. Your devices must be in a chassis cluster.
  C. You must be a policy-based VPN.
  D. You must use main mode for your IKE phase 1 policy.
  A. You must acquire at least three additional licenses.
  C. You must be a policy-based VPN.

• Question 160:

  You have just created a few hundred application firewall rules on an SRX device and applied them to the appropriate firewall polices. However, you are concerned that the SRX device might become overwhelmed with the increased processing required to process traffic through the application firewall rules.

  Which three actions will help reduce the amount of processing required by the application firewall rules? (Choose three.)

  A. Use stateless firewall filtering to block the unwanted traffic.
  B. Implement AppQoS to drop the unwanted traffic.
  C. Implement screen options to block the unwanted traffic.
  D. Implement IPS to drop the unwanted traffic.
  E. Use security policies to block the unwanted traffic.
  A. Use stateless firewall filtering to block the unwanted traffic.
  C. Implement screen options to block the unwanted traffic.
  E. Use security policies to block the unwanted traffic.