Juniper JN0-633 Online Practice Questions and Exam Preparation

Juniper JN0-633 Online Questions & Answers

• Question 41:

  Given the following session output:

  Session ID. , Policy namE. default-policy-00/2, StatE. Active, Timeout: 1794, Valid

  In: 2001:660:1000:8c00::b/1053 --> 2001:660:1000:9002::aafe/80;tcp, IF. reth0.0, Pkts: 4, Bytes: 574 Out: 192.168.203.10/80 --> 192.168.203.1/24770;tcp, IF. reth1.0, Pkts: 3, Bytes:

  Which statement is correct about the security flow session output?

  A. This session is about to expire.
  B. NAT64 is used.
  C. Proxy NDP is used for this session.
  D. The IPv4 Web server runs services on TCP port 24770.
  B. NAT64 is used.

• Question 42:

  You must configure a central SRX device connected to two branch offices with overlapping IP address space. The branch office connections to the central SRX device must reside in separate routing instances. Which two components are required? (Choose two.)

  A. virtual routing instance
  B. forwarding instance
  C. static NAT
  D. persistent NAT
  A. virtual routing instance
  C. static NAT

• Question 43:

  Microsoft has altered the way their Web-based Hotmail application works. You want to update your application firewall policy to correctly identify the altered Hotmail application. Which two steps must you take to modify the application? (Choose two.)

  A. user@srx> request services application-identification application copy junos:HOTMAIL
  B. user@srx> request services application-identification application enable junos:HOTMAIL
  C. user@srx# edit services custom application-identification my:HOTMAIL
  D. user@srx# edit services application-identification my:HOTMAIL
  A. user@srx> request services application-identification application copy junos:HOTMAIL
  D. user@srx# edit services application-identification my:HOTMAIL

• Question 44:

  You have configured static NAT for a Web server in your DMZ. Both internal and external users can reach the Web server using its IP address. However, only internal users are able to reach the Web server using its DNS name. External

  users receive an error message from their browser.

  Which action would solve this problem?

  A. Modify the security policy.
  B. Disable Web filtering.
  C. Use destination NAT instead of static NAT.
  D. Use DNS doctoring.
  D. Use DNS doctoring.

• Question 45:

  You have implemented a tunnel in your network using DS-Lite. The tunnel is formed between one of the SRX devices in your network and a DS-Lite-compatible CPE device in your customer's network. Which two statements are true about this scenario? (Choose two.)

  A. The SRX device will serve as the softwire initiator and the customer CPE device will serve as the softwire concentrator.
  B. The SRX device will serve as the softwire concentrator and the customer CPE device will serve as the softwire initiator.
  C. The infrastructure network supporting the tunnel will be based on IPv4.
  D. The infrastructure network supporting the tunnel will be based on IPv6.
  B. The SRX device will serve as the softwire concentrator and the customer CPE device will serve as the softwire initiator.
  D. The infrastructure network supporting the tunnel will be based on IPv6.

• Question 46:

  What are two network scanning methods? (Choose two.)

  A. SYN flood
  B. ping of death
  C. ping sweep
  D. UDP scan
  C. ping sweep
  D. UDP scan

• Question 47:

  You want to query User Group membership directly using the integrated user firewall services from an Active Directory controller to an SRX Series device. Which two actions are required? (Choose two.)

  A. Configure the LDAP base distinguished name.
  B. Connect the SRX Series device and the MAG Series device in an enforcer configuration.
  C. Configure a domain name, the username and password of the domain, and the name and IP address of the domain controller in the domain.
  D. Configure the Access Control Service on the MAG Series device for local user authentication and verify that authentication information is transferred between the devices.
  A. Configure the LDAP base distinguished name.
  C. Configure a domain name, the username and password of the domain, and the name and IP address of the domain controller in the domain.

• Question 48:

  Click the Exhibit button.

  Referring to the exhibit, AppTrack is only logging the session closure messages for sessions that last 1 to 3 minutes. What is causing this behavior?

  Exhibit:

  

  A. AppTrack is not properly configured under the [edit security application-tracking] hierarchy.
  B. AppTrack only generates session update messages.
  C. AppTrack only generates session closure messages.
  D. AppTrack generates other messages only when the update interval is surpassed.
  D. AppTrack generates other messages only when the update interval is surpassed.

• Question 49:

  Which action will allow an administrator to connect in band to an SRX Series device in transparent mode over SSH?

  A. Use a VLAN interface.
  B. Use the loopback interface.
  C. Use a logical interface.
  D. Use an irb interface.
  D. Use an irb interface.

• Question 50:

  You have a group IPsec VPN established with a single key server and five client devices. Regarding this scenario, which statement is correct?

  A. There is one unique Phase 1 security association and five unique Phase 2 security associations used for this group.
  B. There is one unique Phase 1 security association and one unique Phase 2 security association used for this group.
  C. There are five unique Phase 1 security associations and five unique Phase 2 security associations used for this group.
  D. There are five unique Phase 1 security associations and one unique Phase 2 security association used for this group.
  D. There are five unique Phase 1 security associations and one unique Phase 2 security association used for this group.