Juniper JN0-635 Online Practice Questions and Exam Preparation

Juniper JN0-635 Online Questions & Answers

• Question 81:

  You are asked to set up notifications if one of your collector traffic feeds drops below 100 kbps. Which two configuration parameters must be set to accomplish this task? (Choose two.)

  A. Set a traffic SNMP trap on the JATP appliance
  B. Set a logging notification on the JATP appliance
  C. Set a general triggered notification on the JATP appliance
  D. Set a traffic system alert on the JATP appliance
  B. Set a logging notification on the JATP appliance
  D. Set a traffic system alert on the JATP appliance

• Question 82:

  You have the NAT rule, shown in the exhibit, applied to allow communication across an IPsec tunnel between your two sites with identical networks. Which statement is correct in this scenario?

  A. The NAT rule with translate the source and destination addresses.
  B. The NAT rule will only translate two addresses at a time.
  C. The NAT rule in applied to the N/A routing instance.
  D. 10 packets have been processed by the NAT rule.
  A. The NAT rule with translate the source and destination addresses.

• Question 83:

  Which three types of peer devices are supported for CoS-based IPsec VPNs? (Choose three.)

  A. branch SRX Series device
  B. third-party device
  C. cSRX
  D. high-end SRX Series device
  E. vSRX
  A. branch SRX Series device
  D. high-end SRX Series device
  E. vSRX

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/secuirty-cos-based-ipsec-vpns.html

• Question 84:

  You have a remote access VPN where the remote users are using the NCP client. The remote users can access the internal corporate resources as intended; however, traffic that is destined to all other Internet sites is going through the

  remote access VPN.

  You want to ensure that only traffic that is destined to the internal corporate resources use the remote access VPN.

  Which two actions should you take to accomplish this task? (Choose two.)

  A. Enable the split tunneling feature within the VPN configuration on the SRX Series device
  B. Enable IKEv2 within the VPN configuration on the SRX Series device
  C. Configure the necessary traffic selectors within the VPN configuration on the SRX Series device
  D. Configure split tunneling on the NCP profile on the remote client
  C. Configure the necessary traffic selectors within the VPN configuration on the SRX Series device
  D. Configure split tunneling on the NCP profile on the remote client

  ---

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-remote-access-vpns-with-ncp-exclusive-remote-access-client.html

• Question 85:

  Click the Exhibit button.

  

  Referring to the exhibit, which two statements are true? (Choose two.)

  A. Data is transmitted across the link in plaintext
  B. The link is not protected against man-in-the-middle attacks
  C. The link is protected against man-in-the-middle attacks
  D. Data is transmitted across the link in cyphertext
  B. The link is not protected against man-in-the-middle attacks
  D. Data is transmitted across the link in cyphertext

• Question 86:

  A user is unable to reach a necessary resource. You discover the path through the SRX Series device includes several security features. The traffic is not being evaluated by any security policies. In this scenario, which two components within the flow module would affect the traffic? (Choose two.)

  A. services/ALG
  B. destination NAT
  C. source NAT
  D. route lookup
  B. destination NAT
  D. route lookup

• Question 87:

  Click the Exhibit button.

  

  Referring to the exhibit, which two statements are true? (Choose two.)

  A. Events based on this third-party feed will not affect a host's threat score
  B. SRX Series devices will block traffic based on this third-party feed
  C. SRX Series devices will not block traffic based on this third-party feed
  D. Events based on this third-party feed will affect a host's threat score
  A. Events based on this third-party feed will not affect a host's threat score
  B. SRX Series devices will block traffic based on this third-party feed

  ---

  Reference: https://www.juniper.net/documentation/en_US/release-independent/sky-atp/topics/concept/sky-atp-integrated-feeds.html

• Question 88:

  You have designed the firewall filter shown in the exhibit to limit SSH control traffic to yours SRX Series device without affecting other traffic. Which two statement are true in this scenario? (Choose two.)

  A. The filter should be applied as an output filter on the loopback interface.
  B. Applying the filter will achieve the desired result.
  C. Applying the filter will not achieve the desired result.
  D. The filter should be applied as an input filter on the loopback interface.
  C. Applying the filter will not achieve the desired result.
  D. The filter should be applied as an input filter on the loopback interface.

  ---

  Reference: https://www.juniper.net/documentation//en_US/junos/topics/concept/firewall-filter-ex-series-evaluation-understanding.html