Juniper JN0-635 Online Practice Questions and Exam Preparation

Juniper JN0-635 Online Questions & Answers

• Question 1:

  Click the Exhibit button.

  

  Which statement is correct regarding the information show in the exhibit?

  A. The tunnel binding was discovered automatically
  B. The output is for an ADVPN
  C. The tunnel gateway address was automatically discovered
  D. The tunnel is not encrypting the traffic
  B. The output is for an ADVPN

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/show-security-ipsec-next-hop-tunnels.html

• Question 2:

  You have a webserver and a DNS server residing in the same internal DMZ subnet. The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface. You implement DNS doctoring to ensure remote users can access the webserver.

  Which two statements are true in this scenario? (Choose two.)

  A. The DNS doctoring ALG is not enabled by default.
  B. The Proxy ARP feature must be configured.
  C. The DNS doctoring ALG is enabled by default.
  D. The DNS CNAME record is translated.
  B. The Proxy ARP feature must be configured.
  C. The DNS doctoring ALG is enabled by default.

• Question 3:

  Which Junos security feature is used for signature-based attack prevention?

  A. RADIUS
  B. AppQoS
  C. IPS
  D. PIM
  C. IPS

• Question 4:

  Which interface family is required for Layer 2 transparent mode on SRX Series devices?

  A. LLDP
  B. Ethernet switching
  C. inet
  D. VPLS
  B. Ethernet switching

• Question 5:

  You have noticed a high number of TCP-based attacks directed toward your primary edge device. You are asked to

  configure the IDP feature on your SRX Series device to block this attack. Which two IDP attack objects would you configure to solve this problem? (Choose two.)

  A. Network
  B. Signature
  C. Protocol anomaly
  D. host
  B. Signature
  C. Protocol anomaly

• Question 6:

  Click the Exhibit button.

  

  Referring to the exhibit, which statement is true?

  A. ARP security is securing data across the control interface
  B. IPsec is securing data across the control interface
  C. SSH is securing data across the control interface
  D. MACsec is securing data across the control interface
  D. MACsec is securing data across the control interface

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/show-chassis-cluster-interfaces.html

• Question 7:

  Click the Exhibit button.

  

  You have configured an ADVPN that is operational. However, OSPF will not establish correctly across the ADVPN tunnels. Referring to the exhibit, which two commands will solve the problem? (Choose two.)

  A. [edit protocols ospf area 0.0.0.0] user@srx# set interface st0.0 dynamic-neighbors
  B. [edit protocols ospf area 0.0.0.0] user@srx# set interface st0.0 topology advpn
  C. [edit protocols ospf area 0.0.0.0] user@srx# set interface st0.0 interface-type nbma
  D. [edit protocols ospf area 0.0.0.0] user@srx# set interface st0.0 demand-circuit
  A. [edit protocols ospf area 0.0.0.0] user@srx# set interface st0.0 dynamic-neighbors
  D. [edit protocols ospf area 0.0.0.0] user@srx# set interface st0.0 demand-circuit

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discovery-vpns.html

• Question 8:

  Click the Exhibit button.

  

  You have recently committed the IPS policy shown in the exhibit. When evaluating the expected behavior, you notice that you have a session that matches all the rules in your IPS policy. In this scenario, which action would be taken?

  A. drop packet
  B. no-action
  C. close-client-and-server
  D. ignore-connection
  B. no-action

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-idp-policy-rules-and-rulebases.html

• Question 9:

  Click the Exhibit button.

  

  The exhibit shows a snippet of a security flow trace. A user cannot open an SSH session to a server. Which action will solve the problem?

  A. Create a security policy that matches the traffic parameters
  B. Edit the source NAT to correct the translated address
  C. Create a route entry to direct traffic into the configured tunnel
  D. Create a route to the desired server
  A. Create a security policy that matches the traffic parameters

• Question 10:

  Click the Exhibit button.

  

  A host is unable to communicate with a webserver. Referring to the exhibit, which statement is correct?

  A. The webserver is not listening for traffic on port 80
  B. A policy is denying the traffic between these two hosts
  C. A session is created for this flow
  D. The session table is running out of resources
  B. A policy is denying the traffic between these two hosts