Juniper JNCIP-SEC JN0-635 Questions & Answers

• Question 21:

  You issue the command shown in the exhibit.

  Which policy will be active for the identified traffic?

  A. Policy p4

  B. Policy p7

  C. Policy p1

  D. Policy p12

  Correct Answer: B

• Question 22:

  You have designed the firewall filter shown in the exhibit to limit SSH control traffic to yours SRX Series

  device without affecting other traffic.

  Which two statement are true in this scenario? (Choose two.)

  A. The filter should be applied as an output filter on the loopback interface.

  B. Applying the filter will achieve the desired result.

  C. Applying the filter will not achieve the desired result.

  D. The filter should be applied as an input filter on the loopback interface.

  Correct Answer: CD

  Reference: https://www.juniper.net/documentation//en_US/junos/topics/concept/firewall-filter-ex-series-evaluationunderstanding.html

• Question 23:

  Click the Exhibit button.

  

  Which type of NAT is shown in the exhibit?

  A. NAT46

  B. NAT64

  C. persistent NAT

  D. DS-Lite

  Correct Answer: B

• Question 24:

  Which two additional configuration actions are necessary for the third-party feed shown in the exhibit to work properly? (Choose two.)

  A. You must create a dynamic address entry with the IP filter category and the ipfilter_office365 value.

  B. You must create a dynamic address entry with the CandC category and the cc_offic365 value.

  C. You must apply the dynamic address entry in a security policy.

  D. You must apply the dynamic address entry in a security intelligence policy.

  Correct Answer: AC

• Question 25:

  You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only,

  and BPDUs must be restricted to the VLANs from which they originate.

  Which configuration accomplishes these objectives?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

  Reference: https://www.oreilly.com/library/view/juniper-srx-series/9781449339029/ch06.html

• Question 26:

  Click the Exhibit button.

  

  Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)

  A. Topology 3

  B. Topology 5

  C. Topology 2

  D. Topology 4

  E. Topology 1

  Correct Answer: ADE

  Reference: https://www.juniper.net/documentation/en_US/junos-space17.2/policy-enforcer/topics/concept/ policy-enforcer-deployment-supported-topologies.html

• Question 27:

  Click the Exhibit button.

  

  When attempting to enroll an SRX Series device to JATP, you receive the error shown in the exhibit. What is the cause of the error?

  A. The fxp0 IP address is not routable

  B. The SRX Series device certificate does not match the JATP certificate

  C. The SRX Series device does not have an IP address assigned to the interface that accesses JATP

  D. A firewall is blocking HTTPS on fxp0

  Correct Answer: C

  Reference: https://kb.juniper.net/InfoCenter/index? page=contentandid=KB33979andcat=JATP_SERIESandactp=LIST

• Question 28:

  A user is unable to reach a necessary resource. You discover the path through the SRX Series device

  includes several security features. The traffic is not being evaluated by any security policies.

  In this scenario, which two components within the flow module would affect the traffic? (Choose two.)

  A. services/ALG

  B. destination NAT

  C. source NAT

  D. route lookup

  Correct Answer: BD

• Question 29:

  Malware that is detonated by the JATP sandbox must be able to communicate with the Internet without being able to harm your local network resources.

  Which statement is correct in this scenario?

  A. The management interface must be connected to the Internet zone

  B. The exhaust interface must be connected to the Internet zone

  C. The honeypot interface must be connected to the Internet zone

  D. The monitoring interface must be connected to the Internet zone

  Correct Answer: A

  Reference: https://www.juniper.net/documentation/en_US/release-independent/jatp/topics/topic-map/jatpgetting-started.html

• Question 30:

  Which two modes are supported on Juniper Sky ATP? (Choose two.)

  A. private mode

  B. global mode

  C. tap mode

  D. secure wire mode

  Correct Answer: CD

  Reference: https://www.juniper.net/documentation/en_US/release-independent/sky-atp/topics/concept/skyatp-about.html