Juniper JNCIP-SEC JN0-635 Questions & Answers

• Question 11:

  You are not able to activate the SSH honeypot on the all-in-one Juniper ATP appliance. What would be a cause of this problem?

  A. The collector must have a minimum of two interfaces.

  B. The collector must have a minimum of three interfaces.

  C. The collector must have a minimum of five interfaces.

  D. The collector must have a minimum of four interfaces.

  Correct Answer: D

  Reference: https://www.juniper.net/documentation/en_US/release-independent/jatp/topics/task/configuration/jatptraffic-collectorsetting-ssh-honeypot-detection.html

• Question 12:

  You have a webserver and a DNS server residing in the same internal DMZ subnet. The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface. You implement DNS doctoring to ensure remote users can access the webserver.

  Which two statements are true in this scenario? (Choose two.)

  A. The DNS doctoring ALG is not enabled by default.

  B. The Proxy ARP feature must be configured.

  C. The DNS doctoring ALG is enabled by default.

  D. The DNS CNAME record is translated.

  Correct Answer: BC

• Question 13:

  You opened a support ticket with JTAC for your Juniper ATP appliance. JTAC asks you to set up access to the device using the reverse SSH connection.Which three setting must be configured to satisfy this request? (Choose three.)

  A. Enable JTAC remote access

  B. Create a temporary root account.

  C. Enable a JATP support account.

  D. Create a temporary admin account.

  E. Enable remote support.

  Correct Answer: CDE

  Reference: https://kb.juniper.net/InfoCenter/index?page=contentandid=TN326andcat=andactp=LISTandshowDraft=false

• Question 14:

  The monitor traffic interface command is being used to capture the packets destined to and the from the

  SRX Series device.

  In this scenario, which two statements related to the feature are true? (Choose two.)

  A. This feature does not capture transit traffic.

  B. This feature captures ICMP traffic to and from the SRX Series device.

  C. This feature is supported on high-end SRX Series devices only.

  D. This feature is supported on both branch and high-end SRX Series devices.

  Correct Answer: AD

  Reference: https://forums.juniper.net/t5/Ethernet-Switching/monitor-traffic-interface/td-p/462528

• Question 15:

  According to the log shown in the exhibit, you notice the IPsec session is not establishing. What is the reason for this behavior?

  A. Mismatched proxy ID

  B. Mismatched peer ID

  C. Mismatched preshared key

  D. Incorrect peer address.

  Correct Answer: B

  Reference: https://www.juniper.net/documentation/en_US/release-independent/nce/topics/example/policy-based-vpnusing-j-series-srxseries-device-configuring.html

• Question 16:

  Exhibit.

  

  Referring to the exhibit, which two statements are true? (Choose two.)

  A. The configured solution allows IPv6 to IPv4 translation.

  B. The configured solution allows IPv4 to IPv6 translation.

  C. The IPv6 address is invalid.

  D. External hosts cannot initiate contact.

  Correct Answer: AC

• Question 17:

  Your organization has multiple Active Directory domain to control user access. You must ensure that security polices are passing traffic based upon the user's access rights. What would you use to assist your SRX series devices to accomplish this task?

  A. JIMS

  B. Junos Space

  C. JSA

  D. JATP Appliance

  Correct Answer: A

  https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-user-auth-configurejims.html

• Question 18:

  Which two log format types are supported by the JATP appliance? (Choose two.)

  A. YAML

  B. XML

  C. CSV

  D. YANG

  Correct Answer: BC

  Reference: https://www.juniper.net/documentation/en_US/release-independent/jatp/topics/topic-map/jatp-custom-logingestion.html

• Question 19:

  Exhibit.

  

  A hub member of an ADVPN is not functioning correctly. Referring the exhibit, which action should you take to solve the problem?

  A. [edit interfaces] root@vSRX-1# delete st0.0 multipoint

  B. [edit interfaces] user@hub-1# delete ipsec vpn advpn-vpn traffic-selector

  C. [edit security] user@hub-1# set ike gateway advpn-gateway advpn suggester disable

  D. [edit security] user@hub-1# delete ike gateway advpn-gateway advpn partner

  Correct Answer: B

• Question 20:

  You have noticed a high number of TCP-based attacks directed toward your primary edge device. You are asked to configure the IDP feature on your SRX Series device to block this attack. Which two IDP attack objects would you configure to solve this problem? (Choose two.)

  A. Network

  B. Signature

  C. Protocol anomaly

  D. host

  Correct Answer: BC