Juniper JN0-635 Online Practice Questions and Exam Preparation

Juniper JN0-635 Online Questions & Answers

• Question 11:

  You are asked to look at a configuration that is designed to take all traffic with a specific source ip address and forward the traffic to a traffic analysis server for further evaluation. The configuration is no longer working as intended.

  

  Referring to the exhibit which change must be made to correct the configuration?

  A. Apply the filter as in input filter on interface xe-0/2/1.0
  B. Apply the filter as in input filter on interface xe-0/0/1.0
  C. Create a routing instance named default
  D. Apply the filter as in output filter on interface xe-0/1/0.0
  B. Apply the filter as in input filter on interface xe-0/0/1.0

• Question 12:

  You opened a support ticket with JTAC for your Juniper ATP appliance. JTAC asks you to set up access to the device using the reverse SSH connection.Which three setting must be configured to satisfy this request? (Choose three.)

  A. Enable JTAC remote access
  B. Create a temporary root account.
  C. Enable a JATP support account.
  D. Create a temporary admin account.
  E. Enable remote support.
  C. Enable a JATP support account.
  D. Create a temporary admin account.
  E. Enable remote support.

  ---

  Reference: https://kb.juniper.net/InfoCenter/index?page=contentandid=TN326andcat=andactp=LISTandshowDraft=false

• Question 13:

  You are asked to configure a security policy on the SRX Series device. After committing the policy, you receive the "Policy is out of sync between RE and PFE ." error. Which command would be used to solve the problem?

  A. request security polices resync
  B. request service-deployment
  C. request security polices check
  D. restart security-intelligence
  A. request security polices resync

  ---

  Reference: https://kb.juniper.net/InfoCenter/index?page=contentandid=KB30443andcat=SRX_SERIESandactp=LIST

• Question 14:

  Click the Exhibit button.

  

  You have configured tenant systems on your SRX Series device.

  Referring to the exhibit, which two actions should you take to facilitate inter-TSYS communication? (Choose two.)

  A. Place the logical tunnel interfaces in a virtual router routing instance in the interconnect switch
  B. Place the logical tunnel interfaces in a VPLS routing instance in the interconnect switch
  C. Connect each TSYS with the interconnect switch by configuring INET configured logical tunnel interfaces in the interconnect switch
  D. Connect each TSYS with the interconnect switch by configuring Ethernet VPLS configured logical tunnel interfaces in the interconnect switch
  A. Place the logical tunnel interfaces in a virtual router routing instance in the interconnect switch
  C. Connect each TSYS with the interconnect switch by configuring INET configured logical tunnel interfaces in the interconnect switch

• Question 15:

  Click the Exhibit button.

  

  Referring to the exhibit, which three types of traffic would be examined by the IPS policy between Switch-1 and Switch-2? (Choose three.)

  A. TCP
  B. LLDP
  C. ARP
  D. ICMP
  E. UDP
  A. TCP
  D. ICMP
  E. UDP

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-idp-policy-rules-and-rulebases.html

• Question 16:

  In a Juniper ATP Appliance, what would be a reason for the mitigation rule to be in the failed-remove state?

  A. The Juniper ATP Appliance received a commit error message from the SRX Series device
  B. The Juniper ATP Appliance received an unknown error message from the SRX Series device
  C. The Juniper ATP Appliance was not able to communicate with the SRX Series device
  D. The Juniper ATP Appliance was not able to obtain the config lock
  D. The Juniper ATP Appliance was not able to obtain the config lock

  ---

  Reference: https://www.juniper.net/documentation/en_US/release-independent/jatp/topics/topic-map/jatp-mitigation-and-reporting.html

• Question 17:

  Click the Exhibit button.

  

  Your company has purchased a competitor and now must connect the new network to the existing one. The competitor's gateway device is receiving its ISP address using DHCP. Communication between the two sites must be secured;

  however, obtaining a static public IP address for the new site gateway is not an option at this time. The company has several requirements for this solution:

  A site-to-site IPsec VPN must be used to secure traffic between the two sites; The IKE identity on the new site gateway device must use the hostname option; and Internet traffic from each site should exit through its local Internet connection.

  The configuration shown in the exhibit has been applied to the new site's SRX, but the secure tunnel is not working.

  In this scenario, what configuration change is needed for the tunnel to come up?

  A. Remove the quotes around the hostname
  B. Bind interface st0 to the gateway
  C. Change the IKE policy mode to aggressive
  D. Apply a static address to ge-0/0/2
  C. Change the IKE policy mode to aggressive

• Question 18:

  Your organization has multiple Active Directory domains to control user access. You must ensure that security policies are passing traffic based upon the users' access rights. What would you use to assist your SRX Series devices to accomplish this task?

  A. JATP Appliance
  B. JIMS
  C. JSA
  D. Junos Space
  B. JIMS

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-user-auth-intergrated-user-firewall-overview.html

• Question 19:

  Malware that is detonated by the JATP sandbox must be able to communicate with the Internet without being able to harm your local network resources. Which statement is correct in this scenario?

  A. The management interface must be connected to the Internet zone
  B. The exhaust interface must be connected to the Internet zone
  C. The honeypot interface must be connected to the Internet zone
  D. The monitoring interface must be connected to the Internet zone
  A. The management interface must be connected to the Internet zone

  ---

  Reference: https://www.juniper.net/documentation/en_US/release-independent/jatp/topics/topic-map/jatp-getting-started.html

• Question 20:

  You are asked to configure an SRX Series device to bypass all security features for IP traffic from the engineering department. Which firewall filter will accomplish this task?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D