Juniper JN0-635 Online Practice Questions and Exam Preparation

Juniper JN0-635 Online Questions & Answers

• Question 51:

  You configured a security policy permitting traffic from the trust zone to the DMZ zone, inserted the new policy at the top of the list, and successfully committed it to the SRX Series device. Upon monitoring, you notice that the hit count does not increase on the newly configured policy.

  In this scenario, which two commands would help you to identify the problem? (Choose two.)

  A. user@srx> show security zones trust detail
  B. user@srx> show security shadow-policies from zone trust to zone DMZ
  C. user@srx> show security match-policies from-zone trust to-zone DMZ source-ip 192.168.10.100/32 destination-ip 10.10.10.80/32 protocol tcp source-port 5806 destination-port 443
  D. user@srx> show security match-policies from-zone trust to-zone DMZ source-ip 192.168.10.100/32 destination-ip 10.10.10.80/32 protocol tcp source-port 5806 destination-port 443 result-count 10
  B. user@srx> show security shadow-policies from zone trust to zone DMZ
  D. user@srx> show security match-policies from-zone trust to-zone DMZ source-ip 192.168.10.100/32 destination-ip 10.10.10.80/32 protocol tcp source-port 5806 destination-port 443 result-count 10

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/monitoring-troubleshooting-security-policy.html

• Question 52:

  Click the Exhibit button.

  

  Referring to the exhibit, which statement is true?

  A. Source NAT with PAT is occurring
  B. Destination NAT is occurring
  C. Static NAT without PAT is occurring
  D. Source NAT without PAT is occurring
  A. Source NAT with PAT is occurring

• Question 53:

  Your SRX Series device does not see the SYN packet. What is the default action in this scenario?

  A. The device will forward the subsequent packets and the session will be established
  B. The device will forward the subsequent packets and the session will not be established
  C. The device will drop the subsequent packets and the session will not be established
  D. The device will drop the subsequent packets and the session will be established
  C. The device will drop the subsequent packets and the session will not be established

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-tcp-session-checks.html

• Question 54:

  Which two modes are supported on Juniper Sky ATP? (Choose two.)

  A. private mode
  B. global mode
  C. tap mode
  D. secure wire mode
  C. tap mode
  D. secure wire mode

  ---

  Reference: https://www.juniper.net/documentation/en_US/release-independent/sky-atp/topics/concept/sky-atp-about.html

• Question 55:

  Your organization has multiple Active Directory domain to control user access. You must ensure that security polices are passing traffic based upon the user's access rights. What would you use to assist your SRX series devices to accomplish this task?

  A. JIMS
  B. Junos Space
  C. JSA
  D. JATP Appliance
  A. JIMS

  ---

  https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-user-auth-configure-jims.html

• Question 56:

  An administrator wants to implement persistent NAT for an internal resource so that external hosts are able to initiate communications to the resource, with the internal resource having previously sent packets to the external hosts. Which configuration setting is used to accomplish this goal?

  A. persistent-nat permit any-remote-host
  B. persistent-nat permit target-host-port
  C. address-persistent
  D. persistent-nat permit target-host
  A. persistent-nat permit any-remote-host

• Question 57:

  Which three roles or protocols are required when configuring an ADVPN? (Choose three.)

  A. OSPF
  B. shortcut partner
  C. shortcut suggester
  D. IKEv1
  E. BGP
  A. OSPF
  B. shortcut partner
  C. shortcut suggester

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discovery-vpns.html

• Question 58:

  According to the log shown in the exhibit, you notice the IPsec session is not establishing. What is the reason for this behavior?

  A. Mismatched proxy ID
  B. Mismatched peer ID
  C. Mismatched preshared key
  D. Incorrect peer address.
  B. Mismatched peer ID

  ---

  Reference: https://www.juniper.net/documentation/en_US/release-independent/nce/topics/example/policy-based-vpn-using-j-series-srxseries-device-configuring.html

• Question 59:

  You issue the command shown in the exhibit.

  Which policy will be active for the identified traffic?

  A. Policy p4
  B. Policy p7
  C. Policy p1
  D. Policy p12
  B. Policy p7

• Question 60:

  You are asked to implement the session cache feature on an SRX5400.

  In this scenario, what information does a session cache entry record? (Choose two.)

  A. The type of processing to do for ingress traffic
  B. The type of processing to do for egress traffic
  C. To which SPU the traffic of the session should be forwarded
  D. To which NPU the traffic of the session should be forwarded
  B. The type of processing to do for egress traffic
  C. To which SPU the traffic of the session should be forwarded

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-packet-based-forwarding.html