Juniper JN0-635 Online Practice Questions and Exam Preparation

Juniper JN0-635 Online Questions & Answers

• Question 61:

  Exhibit.

  

  Referring to the exhibit, which two statements are true? (Choose two.)

  A. The c-1 TSYS has a reservation for the security flow resource.
  B. The c-1 TSYS can use security flow resources up to the system maximum.
  C. The c-1 TSYS cannot use any security flow resources.
  D. The c-1 TSYS has no reservation for the security flow resource.
  C. The c-1 TSYS cannot use any security flow resources.
  D. The c-1 TSYS has no reservation for the security flow resource.

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-profile-logical-system.html

• Question 62:

  What are two important functions of the Juniper Networks ATP Appliance solution? (Choose two.)

  A. filtration
  B. detection
  C. statistics
  D. analytics
  B. detection
  D. analytics

  ---

  Reference: https://www.juniper.net/us/en/products-services/security/advanced-threat-prevention/

• Question 63:

  Which two VPN features are supported with CoS-based IPsec VPNs? (Choose two.)

  A. IKEv2
  B. VPN monitoring
  C. dead peer detection
  D. IKEv1
  A. IKEv2
  C. dead peer detection

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/secuirty-cos-based-ipsec-vpns.html

• Question 64:

  In which two ways are tenant systems different from logical systems? (Choose two.)

  A. Tenant systems have higher scalability than logical systems
  B. Tenant systems have less scalability than logical systems
  C. Tenant systems have fewer routing features than logical systems
  D. Tenant systems have more routing features than logical systems
  A. Tenant systems have higher scalability than logical systems
  C. Tenant systems have fewer routing features than logical systems

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/tenant-systems-overview.html#:~:text=Although%20similar%20to%20logical%20systems,administrative%20domain %20for% 20security%20services

• Question 65:

  Which feature of Sky ATP is deployed with Policy Enforcer?

  A. zero-day threat mitigation
  B. software image snapshot support
  C. device inventory management
  D. service redundancy daemon configuration support
  A. zero-day threat mitigation

• Question 66:

  You are asked to configure a new SRX Series CPE device at a remote office. The device must participate in forwarding MPLS and IPsec traffic. Which two statements are true regarding this implementation? (Choose two.)

  A. Host inbound traffic must not be processed by the flow module
  B. Host inbound traffic must be processed by the flow module
  C. The SRX Series device can process both MPLS and IPsec with default traffic handling
  D. A firewall filter must be configured to enable packet mode forwarding
  A. Host inbound traffic must not be processed by the flow module
  D. A firewall filter must be configured to enable packet mode forwarding

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-packet-based-forwarding.html

• Question 67:

  What are two important function of the Juniper Networks ATP appliance solution? (Choose two.).

  A. Statistics
  B. Analysis
  C. Detection
  D. Filtration
  B. Analysis
  C. Detection

  ---

  Reference: https://www.juniper.net/us/en/products-services/security/advanced-threat-prevention/

• Question 68:

  Click the Exhibit button.

  

  The IKE policy and proposal are configured properly on both devices as shown in the exhibit. Which configuration snippet will complete the IKE configuration on the branch SRX Series device?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 69:

  You are not able to activate the SSH honeypot on the all-in-one Juniper ATP appliance. What would be a cause of this problem?

  A. The collector must have a minimum of two interfaces.
  B. The collector must have a minimum of three interfaces.
  C. The collector must have a minimum of five interfaces.
  D. The collector must have a minimum of four interfaces.
  D. The collector must have a minimum of four interfaces.

  ---

  Reference: https://www.juniper.net/documentation/en_US/release-independent/jatp/topics/task/configuration/jatp-traffic-collectorsetting-ssh-honeypot-detection.html

• Question 70:

  Click the Exhibit button.

  

  A user reports trouble when using SSH to a server outside your organization. The traffic traverses an SRX Series device that is performing NAT and applying security policies. Referring to the exhibit, which configuration will allow you to see the bidirectional flow through the SRX Series device?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D