Juniper JNCIP-SEC JN0-636 Questions & Answers

• Question 1:

  Which two additional configuration actions are necessary for the third-party feed shown in the exhibit to work properly? (Choose two.)

  A. You must create a dynamic address entry with the IP filter category and the ipfilter_office365 value.

  B. You must create a dynamic address entry with the CandC category and the cc_offic365 value.

  C. You must apply the dynamic address entry in a security policy.

  D. You must apply the dynamic address entry in a security intelligence policy.

  Correct Answer: AC

• Question 2:

  Which two log format types are supported by the JATP appliance? (Choose two.)

  A. YAML

  B. XML

  C. CSV

  D. YANG

  Correct Answer: BC

  Explanation: https://www.juniper.net/documentation/en_US/release- independent/jatp/topics/topic-map/jatp-custom-log-ingestion.html

• Question 3:

  You want to identify potential threats within SSL-encrypted sessions without requiring SSL proxy to decrypt the session contents. Which security feature achieves this objective?

  A. infected host feeds

  B. encrypted traffic insights

  C. DNS security

  D. Secure Web Proxy

  Correct Answer: C

• Question 4:

  Your company uses non-Juniper firewalls and you are asked to provide a Juniper solution for zero-day malware protection. Which solution would work in this scenario?

  A. Juniper ATP Cloud

  B. Juniper Secure Analytics

  C. Juniper ATP Appliance

  D. Juniper Security Director

  Correct Answer: A

  Explanation: Juniper ATP Cloud provides zero-day malware protection for non-Juniper firewalls. It's a cloud-based service that analyzes files and network traffic to detect and prevent known and unknown (zero-day) threats. It uses a combination of static and dynamic analysis techniques, as well as machine learning, to detect and block malicious files, even if they are not known to traditional anti-virus software. It also provides real-time visibility and detailed forensics for incident response and remediation.

• Question 5:

  You want to use selective stateless packet-based forwarding based on the source address.

  In this scenario, which command will allow traffic to bypass the SRX Series device flow daemon?

  A. set firewall family inet filter bypaa3_flowd term t1 then skip--services accept

  B. set firewall family inet filter bypass_flowd term t1 then routing-instance stateless

  C. set firewall family inet filter bypas3_flowd term t1 then virtual-channel stateless

  D. set firewall family inet filter bypass__f lowd term t1 then packet--mode

  Correct Answer: C

• Question 6:

  You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restricted to the VLANs from which they originate.

  Which configuration accomplishes these objectives?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

  https://www.juniper.net/documentation/us/en/software/junos/multicast- l2/topics/ref/statement/family-ethernet-switching-edit-interfaces-qfx-series.html#statement- name-statement__d26608e73

• Question 7:

  You are asked to deploy filter-based forwarding on your SRX Series device for incoming traffic sourced from the 10.10 100 0/24 network in this scenario, which three statements are correct? (Choose three.)

  A. You must create a forwarding-type routing instance.

  B. You must create and apply a firewall filter that matches on the source address 10.10.100.0/24 and then sends this traffic to your routing

  C. You must create and apply a firewall filter that matches on the destination address 10 10.100.0/24 and then sends this traffic to your routing instance.

  D. You must create a RIB group that adds interface routes to your routing instance.

  E. You must create a VRF-type routing instance.

  Correct Answer: BCD

  Explanation: In order to deploy filter-based forwarding on an SRX Series device for incoming traffic sourced from the 10.10.100.0/24 network, you must first create and apply a firewall filter that matches on the source address 10.10.100.0/24. Then, you must create a RIB group that adds interface routes to your routing instance and apply it. The filter will forward the traffic matching the source address to the routing instance. You don't need to create a forwarding-type routing instance or a VRF-type routing instance.

• Question 8:

  You are requested to enroll an SRX Series device with Juniper ATP Cloud.

  Which statement is correct in this scenario?

  A. If a device is already enrolled in a realm and you enroll it in a new realm, the device data or configuration information is propagated to the new realm.

  B. The only way to enroll an SRX Series device is to interact with the Juniper ATP Cloud Web portal.

  C. When the license expires, the SRX Series device is disenrolled from Juniper ATP Cloud without a grace period

  D. Juniper ATP Cloud uses a Junos OS op script to help you configure your SRX Series device to connect to the Juniper ATP Cloud service.

  Correct Answer: D

• Question 9:

  Exhibit Referring to the exhibit, which three statements are true? (Choose three.)

  

  A. The packet's destination is to an interface on the SRX Series device.

  B. The packet's destination is to a server in the DMZ zone.

  C. The packet originated within the Trust zone.

  D. The packet is dropped before making an SSH connection.

  E. The packet is allowed to make an SSH connection.

  Correct Answer: ACD

• Question 10:

  Your company wants to use the Juniper Seclntel feeds to block access to known command and control servers, but they do not want to use Security Director to manage the feeds. Which two Juniper devices work in this situation? (Choose two)

  A. EX Series devices

  B. MX Series devices

  C. SRX Series devices

  D. QFX Series devices

  Correct Answer: BC

  Explanation: Juniper MX and SRX series devices support the integration of Seclntel feeds, which provide information about known command and control servers, for the purpose of blocking access to them. These devices can be configured to use the Seclntel feeds without the need for Security Director to manage the feeds. EX series and QFX series devices are not capable of working in this situation, as they do not support the integration of Seclntel feeds.