Juniper JN0-635 Online Practice Questions and Exam Preparation

Juniper JN0-635 Online Questions & Answers

• Question 71:

  Exhibit.

  

  A hub member of an ADVPN is not functioning correctly. Referring the exhibit, which action should you take to solve the problem?

  A. [edit interfaces] root@vSRX-1# delete st0.0 multipoint
  B. [edit interfaces] user@hub-1# delete ipsec vpn advpn-vpn traffic-selector
  C. [edit security] user@hub-1# set ike gateway advpn-gateway advpn suggester disable
  D. [edit security] user@hub-1# delete ike gateway advpn-gateway advpn partner
  B. [edit interfaces] user@hub-1# delete ipsec vpn advpn-vpn traffic-selector

• Question 72:

  You have configured static NAT for a webserver in your DMZ. Both internal and external users can reach the webserver using the webserver's IP address. However, only internal users can reach the webserver using the webserver's DNS name. When external users attempt to reach the webserver using the webserver's DNS name, an error message is received.

  Which action would solve this problem?

  A. Disable Web filtering
  B. Use DNS doctoring
  C. Modify the security policy
  D. Use destination NAT instead of static NAT
  B. Use DNS doctoring

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-dns-algs.html

• Question 73:

  Click the Exhibit button.

  

  Which type of NAT is shown in the exhibit?

  A. NAT46
  B. NAT64
  C. persistent NAT
  D. DS-Lite
  B. NAT64

• Question 74:

  Exhibit.

  

  Referring to the exhibit, a spoke member of an ADVPN is not functioning correctly. Which two commands will solve this problem? (Choose two.)

  A. [edit interfaces] user@srx# delete st0.0 multipoint
  B. [edit security ike gateway advpn-gateway] user@srx# delete advpn partner
  C. [edit security ike gateway advpn-gateway] user@srx# set version v1-only
  D. [edit security ike gateway advpn-gateway] user@srx# set advpn suggester disable
  B. [edit security ike gateway advpn-gateway] user@srx# delete advpn partner
  D. [edit security ike gateway advpn-gateway] user@srx# set advpn suggester disable

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discovery-vpns.html

• Question 75:

  Click the Exhibit button.

  

  Referring to the exhibit, which IPS deployment mode is running on the SRX5800 device?

  A. sniffer mode
  B. integrated mode
  C. monitor mode
  D. in-line tap mode
  B. integrated mode

• Question 76:

  Click the Exhibit button.

  

  You are asked to look at a configuration that is designed to take all traffic with a specific source IP address and forward the traffic to a traffic analysis server for further evaluation. The configuration is not working as intended. Referring to the exhibit, which change must be made to correct the configuration?

  A. Apply the filter as an input filter on interface xe-0/2/1.0
  B. Create a routing instance named default
  C. Apply the filter as an input filter on interface xe-0/0/1.0
  D. Apply the filter as an output filter on interface xe-0/1/0.0
  C. Apply the filter as an input filter on interface xe-0/0/1.0

• Question 77:

  You must troubleshoot ongoing problems with IPsec tunnels and security policy processing. Your network consists of SRX340s and SRX5600s. In this scenario, which two statements are true? (Choose two.)

  A. IPsec logs are written to the kmd log file by default
  B. IKE logs are written to the messages log file by default
  C. You must enable data plane logging on the SRX340 devices to generate security policy logs
  D. You must enable data plane logging on the SRX5600 devices to generate security policy logs
  A. IPsec logs are written to the kmd log file by default
  D. You must enable data plane logging on the SRX5600 devices to generate security policy logs

• Question 78:

  You are trying to get a SSH honeypot set up on a Juniper ATP Appliance collector. The collector is running on hardware with two physical interfaces and two physical CPU cores. The honeypot feature is not working.

  Which statement is true in this scenario?

  A. The collector must have at least three physical interfaces
  B. The collector must have at least four physical cores
  C. The collector must have at least four physical interfaces
  D. The collector must have at least six physical cores
  A. The collector must have at least three physical interfaces

• Question 79:

  Click the Exhibit button.

  

  A user is trying to reach a company's website, but the connection errors out. The security policies are configured correctly. Referring to the exhibit, what is the problem?

  A. Persistent NAT must be enabled
  B. The action for rule 1 must change to static-nat inet
  C. DNS ALG must be disabled
  D. Static NAT is missing a rule for DNS server
  D. Static NAT is missing a rule for DNS server

• Question 80:

  You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restricted to the VLANs from which they originate. Which configuration accomplishes these objectives?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  Reference: https://www.oreilly.com/library/view/juniper-srx-series/9781449339029/ch06.html