Juniper JN0-636 Online Practice Questions and Exam Preparation

Juniper JN0-636 Online Questions & Answers

• Question 71:

  Exhibit

  

  You are using traceoptions to verify NAT session information on your SRX Series device. Referring to the exhibit, which two statements are correct? (Choose two.)

  A. This is the last packet in the session.
  B. The SRX Series device is performing both source and destination NAT on this session.
  C. This is the first packet in the session.
  D. The SRX Series device is performing only source NAT on this session.
  A. This is the last packet in the session.
  B. The SRX Series device is performing both source and destination NAT on this session.

• Question 72:

  You are connecting two remote sites to your corporate headquarters site. You must ensure that all traffic is secured and sent directly between sites In this scenario, which VPN should be used?

  A. IPsec ADVPN
  B. hub-and-spoke IPsec VPN
  C. Layer 2 VPN
  D. full mesh Layer 3 VPN with EBGP
  A. IPsec ADVPN

  ---

  Explanation/Reference:

  IPsec ADVPN (Auto-Discovery VPN) is a VPN that enables the creation of a full mesh VPN topology among a set of remote sites. It allows the remote sites to discover one another automatically and establish IPsec VPN tunnels among themselves. It is useful when you need to connect multiple remote sites to your corporate headquarters site, and ensure that all traffic is secured and sent directly between sites. ADVPN allows for the creation of a hub-and-spoke topology, which is not suitable for this case. Layer 2 VPN can be used for point to point connectivity but does not secure the traffic. Also, A full mesh Layer 3 VPN with EBGP is a good option for this scenario but it is more complex than ADVPN, and it requires more configuration.

• Question 73:

  Exhibit.

  

  Referring to the exhibit, which two statements are true? (Choose two.)

  A. Juniper Networks will not investigate false positives generated by this custom feed.
  B. The custom infected hosts feed will not overwrite the Sky ATP infected host's feed.
  C. The custom infected hosts feed will overwrite the Sky ATP infected host's feed.
  D. Juniper Networks will investigate false positives generated by this custom feed.
  A. Juniper Networks will not investigate false positives generated by this custom feed.
  C. The custom infected hosts feed will overwrite the Sky ATP infected host's feed.

  ---

  Explanation/Reference:

  https://www.juniper.net/documentation/en_US/junos-space18.1/policy- enforcer/topics/task/configuration/junos-space-policyenforcer-custom-feeds-infected-host- configure.html

• Question 74:

  You have noticed a high number of TCP-based attacks directed toward your primary edge device. You are asked to configure the IDP feature on your SRX Series device to block this attack. Which two IDP attack objects would you configure to solve this problem? (Choose two.)

  A. Network
  B. Signature
  C. Protocol anomaly
  D. host
  B. Signature
  C. Protocol anomaly

  ---

  Explanation/Reference:

• Question 75:

  Exhibit

  

  Referring to the exhibit, which two statements are true? (Choose two.)

  A. The 3uspicious_Endpoint3 feed is only usable by the SRX-1 device.
  B. You must manually create the suspicious_Endpoint3 feed in the Juniper ATP Cloud interface.
  C. The 3uspiciou3_Endpoint3 feed is usable by any SRX Series device that is a part of the same realm as SRX-1
  D. Juniper ATP Cloud automatically creates the 3uopi'cioua_Endpoints feed after you commit the security policy.
  A. The 3uspicious_Endpoint3 feed is only usable by the SRX-1 device.
  C. The 3uspiciou3_Endpoint3 feed is usable by any SRX Series device that is a part of the same realm as SRX-1

• Question 76:

  In Juniper ATP Cloud, what are two different actions available in a threat prevention policy to deal with an infected host? (Choose two.)

  A. Send a custom message
  B. Close the connection.
  C. Drop the connection silently.
  D. Quarantine the host.
  B. Close the connection.
  D. Quarantine the host.

  ---

  Explanation/Reference:

  In Juniper ATP Cloud, a threat prevention policy allows you to define how the system should handle an infected host. Two of the available actions are:

  Close the connection: This action will close the connection between the infected host and the destination to which it is trying to connect. This will prevent the host from communicating with the destination and will stop any malicious activity.

  Quarantine the host: This action will isolate the infected host from the network by placing it in a quarantine VLAN. This will prevent the host from communicating with other devices on the network, which will prevent it from spreading malware

  or exfiltrating data.

  Sending a custom message is used to notify the user and administrator of the action taken. Drop the connection silently is not an action available in Juniper ATP Cloud.

• Question 77:

  Exhibit

  

  You are asked to establish an IBGP peering between the SRX Series device and the router, but the session is not being established. In the security flow trace on the SRX device, packet drops are observed as shown in the exhibit. What is the correct action to solve the problem on the SRX device?

  A. Create a firewall filter to accept the BGP traffic
  B. Configure destination NAT for BGP traffic.
  C. Add BGP to the Allowed host-inbound-traffic for the interface
  D. Modify the security policy to allow the BGP traffic.
  A. Create a firewall filter to accept the BGP traffic

• Question 78:

  Exhibit

  

  Referring to the exhibit, a spoke member of an ADVPN is not functioning correctly. Which two commands will solve this problem? (Choose two.)

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---

  Explanation/Reference:

• Question 79:

  You are connecting two remote sites to your corporate headquarters site; you must ensure that all traffic is secured and only uses a single Phase 2 SA for both sites.

  In this scenario, which VPN should be used?

  A. An IPsec group VPN with the corporate firewall acting as the hub device.
  B. Full mesh IPsec VPNs with tunnels between all sites.
  C. A hub-and-spoke IPsec VPN with the corporate firewall acting as the hub device.
  D. A full mesh Layer 3 VPN with the corporate firewall acting as the hub device.
  A. An IPsec group VPN with the corporate firewall acting as the hub device.

  ---

  Explanation/Reference:

  https://www.juniper.net/us/en/local/pdf/app-notes/3500202-en.pdf

• Question 80:

  You have a webserver and a DNS server residing in the same internal DMZ subnet. The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface.

  You implement DNS doctoring to ensure remote users can access the webserver.

  Which two statements are true in this scenario? (Choose two.)

  A. The DNS doctoring ALG is not enabled by default.
  B. The Proxy ARP feature must be configured.
  C. The DNS doctoring ALG is enabled by default.
  D. The DNS CNAME record is translated.
  B. The Proxy ARP feature must be configured.
  C. The DNS doctoring ALG is enabled by default.

  ---

  Explanation/Reference: