Juniper JN0-633 Online Practice Questions and Exam Preparation

Juniper JN0-633 Online Questions & Answers

• Question 71:

  Click the Exhibit button.

  An attacker is using a nonstandard port for HTTP for reconnaissance into your network. Referring to the exhibit, which two statements are true? (Choose two.)

  Exhibit:

  

  A. The IPS engine will not detect the application due to the nonstandard port.
  B. The IPS engine will detect the application regardless of the nonstandard port.
  C. The IPS engine will perform application identification until the session is established.
  D. The IPS engine will perform application identification until it processes the first 256 bytes of the packet.
  B. The IPS engine will detect the application regardless of the nonstandard port.
  D. The IPS engine will perform application identification until it processes the first 256 bytes of the packet.

• Question 72:

  Click the Exhibit button.

  [edit security nat static rule-set 12]

  user@SRX2# show

  from zone untrust;

  rule 1 {

  match {

  destination-address 192.168.1.1/32;

  }

  then {

  static-nat {

  prefix {

  10.60.60.1/32;

  }

  }

  }

  }

  Host-2 initiates communication with Host-1. All other routing and policies are in place to allow the traffic.

  What is the result of the communication?

  Exhibit:

  

  A. The 192.168.0.1 address is translated to the 10.60.60.1 address.
  B. The 10.60.60.1 address is translated to the 192.168.1.1 address.
  C. No translation occurs.
  D. The 192.168.0.1 address is translated to the 192.168.1.1 address.
  B. The 10.60.60.1 address is translated to the 192.168.1.1 address.

• Question 73:

  You are using logical systems to segregate customers. You have a requirement to enable communication between the logical systems. What are two ways to accomplish this goal? (Choose two.)

  A. Use a shared DMZ zone to connect the logical systems together.
  B. Use a virtual tunnel (vt-) interface to connect the logical systems together.
  C. Use an external cable to connect the ports from the two logical systems.
  D. Use an interconnect LSYS to connect the logical systems together.
  C. Use an external cable to connect the ports from the two logical systems.
  D. Use an interconnect LSYS to connect the logical systems together.

• Question 74:

  Referring to the following output, which command would you enter in the CLI to produce this result?

  Ruleset Application Client-to-server Rate(bps) Server-to-client Rate(bps) http-App-QoS HTTP ftp-C2S 200 ftp-C2S 200 http-App-QoS HTTP ftp-C2S 200 ftp-C2S 200 ftp-App-QoS FTP ftp-C2S 100 ftp-C2S 100

  A. show class-of-service interface ge-2/1/0
  B. show interface flow-statistics ge-2/1/0
  C. show security flow statistics
  D. show class-of-service applications-traffic-control statistics rate-limiter
  D. show class-of-service applications-traffic-control statistics rate-limiter

• Question 75:

  Click the Exhibit button.

  [edit]

  user@host# show interfaces

  ge-0/0/1 {

  unit 0 {

  family bridge {

  interface-mode access;

  vlan-id 20;

  }

  }

  }

  ge-0/0/10 {

  unit 0 {

  family bridge {

  interface-mode access;

  vlan-id 20;

  }

  }

  }

  [edit]

  user@host# show bridge-domains

  d1 {

  domain-type bridge;

  vlan-id 20;

  }

  [edit]

  user@host# show security flow bridge

  [edit]

  user@host# show security zones

  security-zone 12 {

  host-inbound-traffic {

  system-services {

  any-service;

  }

  }

  interfaces {

  ge-0/0/1.0;

  ge-0/0/10.0;

  }

  }

  Referring to the exhibit, which statement is true?

  A. Packets sent tom the SRX Series device are sent to the RE.
  B. Packets sent to the SRX Series device are discarded.
  C. Only frames that have a VLAN ID of 20 are accepted.
  D. Only frames that do not have any VLAN tags are accepted.
  C. Only frames that have a VLAN ID of 20 are accepted.

• Question 76:

  You have been asked to configure traffic to flow between two virtual routers (VRs) residing on two unique logical systems (LSYSs) on the same SRX5800. How would you accomplish this task?

  A. Configure a security policy that contains the context from VR1 to VR2 to permit the relevant traffic.
  B. Configure a security policy that contains the context from LSYS1 to LSYS2 and relevant match conditions in the rule set to allow traffic between the IP networks in VR1 and VR2.
  C. Configure logical tunnel interfaces between VR1 and VR2 and security policies that allow relevant traffic between VR1 and VR2 over that link.
  D. Configure an interconnect LSYS to facilitate a connection between LSYS1 and LSYS2 and relevant policies to allow the traffic.
  C. Configure logical tunnel interfaces between VR1 and VR2 and security policies that allow relevant traffic between VR1 and VR2 over that link.

• Question 77:

  Click the Exhibit button.

  In the network shown in the exhibit, you want to forward traffic from the employees to ISP1 and ISP2. You want to forward all Web traffic to ISP1 and all other traffic to ISP2. While troubleshooting, you change your filter to forward all traffic to

  ISP1. However, no traffic is sent to ISP1.

  What is causing this behavior?

  Exhibit:

  

  A. The filter is applied to the wrong interface.
  B. The filter should use the next-hop action instead of the routing-instance action.
  C. The filter term does not have a required from statement.
  D. The filter term does not have the accept statement.
  A. The filter is applied to the wrong interface.

• Question 78:

  How does the SRX5800, in transparent mode, signal failover to the connected switches?

  A. It initiates spanning-tree BPDUs.
  B. It sends out gratuitous ARPs.
  C. It flaps the impaired interfaces.
  D. It uses an IP address monitoring configuration.
  B. It sends out gratuitous ARPs.

• Question 79:

  What are the three types of attack objects used in an IPS engine? (Choose three.)

  A. signature
  B. chargen
  C. compound
  D. component
  E. anomaly
  A. signature
  C. compound
  E. anomaly

• Question 80:

  Which two statements are true about an interconnect logical system on an SRX Series device? (Choose two.)

  A. VXLAN is used to switch inter-LSYS-traffic.
  B. The root and user LSYSs connect to the interconnect LSYS using vt interfaces.
  C. VPLS is used to switch inter-LSYS traffic.
  D. The root and user LSYSs connect to the interconnect LSYS using lt interfaces.
  C. VPLS is used to switch inter-LSYS traffic.
  D. The root and user LSYSs connect to the interconnect LSYS using lt interfaces.