Juniper JNCIP-SEC JN0-635 Questions & Answers

• Question 71:

  Click the Exhibit button.

  

  The exhibit shows a snippet of a security flow trace. A user cannot open an SSH session to a server. Which action will solve the problem?

  A. Create a security policy that matches the traffic parameters

  B. Edit the source NAT to correct the translated address

  C. Create a route entry to direct traffic into the configured tunnel

  D. Create a route to the desired server

  Correct Answer: A

• Question 72:

  Click the Exhibit button.

  

  Referring to the exhibit, which two statements are true? (Choose two.)

  A. Data is transmitted across the link in plaintext

  B. The link is not protected against man-in-the-middle attacks

  C. The link is protected against man-in-the-middle attacks

  D. Data is transmitted across the link in cyphertext

  Correct Answer: BD

• Question 73:

  You are asked to secure your network against TOR network traffic.

  Which two Juniper products would accomplish this task? (Choose two.)

  A. Contrail Edge

  B. Contrail Insights

  C. Juniper Sky ATP

  D. Juniper ATP Appliance

  Correct Answer: CD

• Question 74:

  Click the Exhibit button.

  

  You are implementing a new branch site and want to ensure Internet traffic is sent directly to your ISP and other traffic is sent to your company headquarters. You have configured filter-based forwarding to accomplish this objective. You verify proper functionality using the outputs shown in the exhibit.

  Which two statements are true in this scenario? (Choose two.)

  A. The session utilizes one routing instance

  B. The ge-0/0/5 and ge-0/0/1 interfaces must reside in a single security zone

  C. The ge-0/0/5 and ge-0/0/1 interfaces can reside in different security zones

  D. The session utilizes two routing instances

  Correct Answer: AC

• Question 75:

  Which three roles or protocols are required when configuring an ADVPN? (Choose three.)

  A. OSPF

  B. shortcut partner

  C. shortcut suggester

  D. IKEv1

  E. BGP

  Correct Answer: ABC

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discoveryvpns.html

• Question 76:

  You must troubleshoot ongoing problems with IPsec tunnels and security policy processing. Your network consists of SRX340s and SRX5600s.

  In this scenario, which two statements are true? (Choose two.)

  A. IPsec logs are written to the kmd log file by default

  B. IKE logs are written to the messages log file by default

  C. You must enable data plane logging on the SRX340 devices to generate security policy logs

  D. You must enable data plane logging on the SRX5600 devices to generate security policy logs

  Correct Answer: AD

• Question 77:

  Which three types of peer devices are supported for CoS-based IPsec VPNs? (Choose three.)

  A. branch SRX Series device

  B. third-party device

  C. cSRX

  D. high-end SRX Series device

  E. vSRX

  Correct Answer: ADE

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/secuirty-cos-basedipsec-vpns.html

• Question 78:

  You are asked to configure a new SRX Series CPE device at a remote office. The device must participate in forwarding MPLS and IPsec traffic.

  Which two statements are true regarding this implementation? (Choose two.)

  A. Host inbound traffic must not be processed by the flow module

  B. Host inbound traffic must be processed by the flow module

  C. The SRX Series device can process both MPLS and IPsec with default traffic handling

  D. A firewall filter must be configured to enable packet mode forwarding

  Correct Answer: AD

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-packet-basedforwarding.html

• Question 79:

  You are asked to merge to corporate network with the network from a recently acquired company. Both networks use the same private IPv4 address space (172.25.126.0/24). An SRX Series device servers as the gateway for each network.

  Which solution allows you to merge the two networks without modifying the current address assignments?

  A. persistent NAT

  B. NAT46

  C. source NAT

  D. double NAT

  Correct Answer: D

  Reference: https://kb.juniper.net/InfoCenter/index?page=contentandid=KB21286

• Question 80:

  You have set up Security Director with Policy Enforcer and have configured 12 third-party feeds and a Sky ATP feed. You are also injecting 16 feeds using the available open API. You want to add another compatible feed using the available open API, but Policy Enforcer is not receiving the new feed.

  What is the problem in this scenario?

  A. You must wait 48 hours for the feed to update

  B. You cannot add more than 16 feeds through the available open API

  C. You have reached the maximum limit of 29 total feeds

  D. You cannot add more than 16 feeds with the available open API

  Correct Answer: C

  Reference: https://www.juniper.net/documentation/en_US/release-independent/sky-atp/informationproducts/ pathway-pages/sky-atp-admin-guide.pdf page 110