Juniper JNCIP-SEC JN0-635 Questions & Answers

• Question 41:

  Click the Exhibit button.

  

  Referring to the exhibit, which IPS deployment mode is running on the SRX5800 device?

  A. sniffer mode

  B. integrated mode

  C. monitor mode

  D. in-line tap mode

  Correct Answer: B

• Question 42:

  Click the Exhibit button.

  

  Referring to the exhibit, you are attempting to enable IPsec power mode to improve IPsec VPN performance. However, you are unable to use IPsec power mode.

  What is the problem?

  A. IPsec power mode cannot be used with IPsec performance acceleration

  B. IPsec power mode cannot be used with high IPsec maximum segment size values

  C. IPsec power mode cannot be used with advanced services

  D. IPsec power mode requires that you configure a policy-based VPN

  Correct Answer: C

  Reference: https://www.juniper.net/documentation//en_US/junos/topics/reference/configuration-statement/ security-flow-power-mode-ipsec.html

• Question 43:

  Your SRX Series device does not see the SYN packet. What is the default action in this scenario?

  A. The device will forward the subsequent packets and the session will be established

  B. The device will forward the subsequent packets and the session will not be established

  C. The device will drop the subsequent packets and the session will not be established

  D. The device will drop the subsequent packets and the session will be established

  Correct Answer: C

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-tcp-sessionchecks.html

• Question 44:

  Click the Exhibit button.

  

  Given the command output shown in the exhibit, which two statements are true? (Choose two.)

  A. The host 172.31.15.1 is directly connected to interface ge-0/0/3.0

  B. Traffic matching this session has been received since the session was established

  C. The host 10.10.101.10 is directly connected to interface ge-0/0/4.0

  D. Network Address Translation is applied to this session

  Correct Answer: BC

• Question 45:

  Click the Exhibit button.

  

  Branch 1 and Branch 2 have an active VPN tunnel configured, but internal hosts cannot communicate with each other.

  Referring to the exhibit, which type of configuration should be applied to solve the problem?

  A. Configure destination NAT on both Branch 1 and Branch 2

  B. Configure source NAT on Branch 1

  C. Configure destination NAT on Branch 2 only

  D. Configure static NAT on both Branch 1 and Branch 2

  Correct Answer: D

• Question 46:

  In which two ways are tenant systems different from logical systems? (Choose two.)

  A. Tenant systems have higher scalability than logical systems

  B. Tenant systems have less scalability than logical systems

  C. Tenant systems have fewer routing features than logical systems

  D. Tenant systems have more routing features than logical systems

  Correct Answer: AC

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/tenant-systemsoverview.html#:~:text=Although%20similar%20to%20logical%20systems,administrative%20domain % 20for% 20security%20services

• Question 47:

  Which two statements are true about ADVPN members? (Choose two.)

  A. ADVPN members are authenticated using pre-shared keys

  B. ADVPN members are authenticated using certificates

  C. ADVPN members can use IKEv2

  D. ADVPN members can use IKEv1

  Correct Answer: BC

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discoveryvpns.html

• Question 48:

  Which two VPN features are supported with CoS-based IPsec VPNs? (Choose two.)

  A. IKEv2

  B. VPN monitoring

  C. dead peer detection D. IKEv1

  Correct Answer: AC

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/secuirty-cos-basedipsec-vpns.html

• Question 49:

  Click the Exhibit button.

  

  Which statement is correct regarding the information show in the exhibit?

  A. The tunnel binding was discovered automatically

  B. The output is for an ADVPN

  C. The tunnel gateway address was automatically discovered

  D. The tunnel is not encrypting the traffic

  Correct Answer: B

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/ show-security-ipsec-next-hop-tunnels.html

• Question 50:

  Click the Exhibit button.

  

  A host is unable to communicate with a webserver. Referring to the exhibit, which statement is correct?

  A. The webserver is not listening for traffic on port 80

  B. A policy is denying the traffic between these two hosts

  C. A session is created for this flow

  D. The session table is running out of resources

  Correct Answer: B