Juniper JN0-633 Online Practice Questions and Exam Preparation

Juniper JN0-633 Online Questions & Answers

• Question 171:

  Which three match condition objects are required when creating IPS rules? (Choose three.)

  A. attack objects
  B. address objects
  C. terminal objects
  D. IP action objects
  E. zone objects
  A. attack objects
  B. address objects
  E. zone objects

• Question 172:

  You are asked to implement the AppFW feature on an SRX Series device.

  Which three tasks must be performed to make the feature work? (Choose three.)

  A. Configure a firewall filter that includes the application-firewall policy.
  B. Install an IPS license.
  C. Install an AppSecure license.
  D. Configure a security policy that includes the application-firewall policy.
  E. Configure an application-firewall policy.
  C. Install an AppSecure license.
  D. Configure a security policy that includes the application-firewall policy.
  E. Configure an application-firewall policy.

• Question 173:

  -- Exhibit -user@srx> show security flow session Session ID. 7724, Policy namE. default-permit/4, Timeout: 2 In: 1.1.70.6/17 --> 100.0.0.1/2326;icmp, IF. ge-0/0/3 Out: 10.1.10.5/2326 --> 1.1.70.6/17;icmp, IF. ge-0/0/2 Session ID. 18408, Policy namE. default-permit/4, Timeout: 2 In: 10.1.10.5/64513 --> 1.1.70.6/512;icmp, IF. ge-0/0/2.0 Out: 1.1.70.6/512 --> 100.0.0.1/64513;icmp, IF. ge-0/0/3.10 -- Exhibit -

  A user has reported a traffic drop issue between a host with the 10.1.10.5 internal IP address and a host with the 1.1.70.6 IP address. The traffic transits an SRX240 acting as a NAT translator. You are investigating the issue on the SRX240 using the output shown in the exhibit. Regarding this scenario, which two statements are true? (Choose two.)

  A. The sessions shown indicate interface-based NAT processing.
  B. The sessions shown indicate static NAT processing.
  C. ICMP traffic is passing in both directions.
  D. ICMP traffic is passing in one direction.
  B. The sessions shown indicate static NAT processing.
  C. ICMP traffic is passing in both directions.

• Question 174:

  You are asked to configure your SRX Series device to support IDP SSL inspections for up to 6,000 concurrent HTTP sessions to a server within your network.

  Which two statements are true in this scenario? (Choose two.)

  A. You must add at least one PKI certificate.
  B. Junos does not support more than 5000 sessions in this scenario.
  C. You must enable SSL decoding.
  D. You must enable SSL inspection.
  C. You must enable SSL decoding.
  D. You must enable SSL inspection.

• Question 175:

  You are attempting to establish an IPsec VPN between two SRX devices. However, there is another device between the SRX devices that does not pass traffic that is using UDP port 4500. How would you resolve this problem?

  A. Enable NAT-T.
  B. Disable NAT-T.
  C. Disable PAT.
  D. Enable PAT.
  B. Disable NAT-T.