Juniper JN0-636 Online Practice Questions and Exam Preparation

Juniper JN0-636 Online Questions & Answers

• Question 1:

  Which two statements are correct regarding tenant systems on SRX Series devices? (Choose two.)

  A. A maximum of 32 tenant systems can be configured on a physical SRX device.
  B. All tenant systems share a single routing protocol process.
  C. Each tenant system runs its own instance of the routing protocol process
  D. A maximum of 500 tenant systems can be configured on a physical SRX device.
  C. Each tenant system runs its own instance of the routing protocol process
  D. A maximum of 500 tenant systems can be configured on a physical SRX device.

  ---

  Explanation/Reference:

  The following statements are true regarding tenant systems on SRX Series devices:

  Each tenant system runs its own instance of the routing protocol process. Each tenant system is isolated, and it has its own routing table, interfaces, and security policies.

  A maximum of 500 tenant systems can be configured on a physical SRX device. This allows for a high degree of flexibility and scalability, as each tenant system can be configured with its own set of features and security policies. A maximum

  of 32 tenant systems can be configured on a physical SRX device and All tenant systems share a single routing protocol process are not correct statements

• Question 2:

  Exhibit

  

  Referring to the exhibit, which two statements are true about the CAK status for the CAK named "FFFP"? (Choose two.)

  A. CAK is not used for encryption and decryption of the MACsec session.
  B. SAK is successfully generated using this key.
  C. CAK is used for encryption and decryption of the MACsec session.
  D. SAK is not generated using this key.
  C. CAK is used for encryption and decryption of the MACsec session.
  D. SAK is not generated using this key.

• Question 3:

  While troubleshooting security policies, you added the count action. Where do you see the result of this action?

  A. In the show security policies hit-count command output.
  B. In the show security flow statistics command output.
  C. In the show security policies detail command output.
  D. In the show firewall log command output.
  A. In the show security policies hit-count command output.

• Question 4:

  You are asked to detect domain generation algorithms

  Which two steps will accomplish this goal on an SRX Series firewall? (Choose two.)

  A. Define an advanced-anti-malware policy under [edit services].
  B. Attach the security-metadata-streaming policy to a security
  C. Define a security-metadata-streaming policy under [edit
  D. Attach the advanced-anti-malware policy to a security policy.
  B. Attach the security-metadata-streaming policy to a security
  D. Attach the advanced-anti-malware policy to a security policy.

  ---

  Explanation/Reference:

  To detect domain generation algorithms (DGAs) on an SRX Series firewall, you can use the security-metadata-streaming and advanced-anti-malware features. The first step is to define a security-metadata-streaming policy under

  [edit services], which allows the firewall to receive and process metadata from a third- party security intelligence service. This metadata includes information about DGAs, which the firewall can use to identify and block malicious traffic. The

  second step is to attach the security-metadata-streaming policy to a security policy, this will enable the firewall to inspect traffic against the DGA domains provided by the intelligence service.

  The third step is to enable the advanced-anti-malware feature on the firewall, and attach an advanced-anti-malware policy to a security policy. This allows the firewall to detect and block malware based on signatures and behavioral analysis,

  which can also detect and block traffic associated with DGAs.

• Question 5:

  Exhibit

  

  You configure a traceoptions file called radius on your returns the output shown in the exhibit What is the source of the problem?

  A. An incorrect password is being used.
  B. The authentication order is misconfigured.
  C. The RADIUS server IP address is unreachable.
  D. The RADIUS server suffered a hardware failure.
  D. The RADIUS server suffered a hardware failure.

• Question 6:

  Exhibit

  

  Which two statements are correct about the output shown in the exhibit. (Choose two.)

  A. The source address is translated.
  B. The packet is an SSH packet
  C. The packet matches a user-configured policy
  D. The destination address is translated.
  A. The source address is translated.
  B. The packet is an SSH packet

• Question 7:

  Exhibit You are using trace options to verity NAT session information on your SRX Series device Referring to the exhibit, which two statements are correct? (Choose two.)

  

  A. This packet is part of an existing session.
  B. The SRX device is changing the source address on this packet from
  C. This is the first packet in the session
  D. The SRX device is changing the destination address on this packet 10.0.1 1 to 172 20.101.10.
  C. This is the first packet in the session
  D. The SRX device is changing the destination address on this packet 10.0.1 1 to 172 20.101.10.

• Question 8:

  Exhibit

  

  Referring to the exhibit, which type of NAT is being performed?

  A. Static NAT
  B. Destination NAT
  C. Persistent NAT
  D. Source NAT
  D. Source NAT

• Question 9:

  Exhibit An administrator wants to configure an SRX Series device to log binary security events for tenant systems. Referring to the exhibit, which statement would complete the configuration?

  

  A. Configure the tenant as TSYS1 for the pi security profile.
  B. Configure the tenant as root for the pi security profile.
  C. Configure the tenant as master for the pi security profile.
  D. Configure the tenant as local for the pi security profile
  B. Configure the tenant as root for the pi security profile.

• Question 10:

  Exhibit You have recently configured Adaptive Threat Profiling and notice 20 IP address entries in the monitoring section of the Juniper ATP Cloud portal that do not match the number of entries locally on the SRX Series device, as shown in the exhibit.

  

  What is the correct action to solve this problem on the SRX device?

  A. You must configure the DAE in a security policy on the SRX device.
  B. Refresh the feed in ATP Cloud.
  C. Force a manual download of the Proxy__Nodes feed.
  D. Flush the DNS cache on the SRX device.
  C. Force a manual download of the Proxy__Nodes feed.