Free JN0-635 Exam Dumps PDF Preview

Question 1

Single choice

Your SRX Series device does not see the SYN packet.

What is the default action in this scenario?

A
The device will forward the subsequent packets and the session will be established
B
The device will forward the subsequent packets and the session will not be established
C
The device will drop the subsequent packets and the session will not be established
D
The device will drop the subsequent packets and the session will be established

Reveal answer details Close answer details

Correct answerC

Explanation

References:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-tcp-session-checks.html

Question 2

Multiple choice

Which three type of peer devices are supported for Cos-Based IPsec VPN?

A
High-end SRX Series device
B
cSRX
C
vSRX
D
Branch-end SRX Series devics

Reveal answer details Close answer details

Correct answersA, C, D

Question 3

Multiple choice

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

A
Events based on this third-party feed will not affect a host's threat score
B
SRX Series devices will block traffic based on this third-party feed
C
SRX Series devices will not block traffic based on this third-party feed
D
Events based on this third-party feed will affect a host's threat score

Reveal answer details Close answer details

Correct answersA, B

Explanation

References:
https://www.juniper.net/documentation/en_US/release-independent/sky-atp/topics/concept/sky-atp-integrated-feeds.html

Question 4

Multiple choice

Click the Exhibit button.

You are implementing a new branch site and want to ensure Internet traffic is sent directly to your ISP and other traffic is sent to your company headquarters. You have configured filter-based forwarding to accomplish this objective. You verify proper functionality using the outputs shown in the exhibit.

Which two statements are true in this scenario? (Choose two.)

A
The session utilizes one routing instance
B
The ge-0/0/5 and ge-0/0/1 interfaces must reside in a single security zone
C
The ge-0/0/5 and ge-0/0/1 interfaces can reside in different security zones
D
The session utilizes two routing instances

Reveal answer details Close answer details

Correct answersA, C

Question 5

Multiple choice

Click the Exhibit button.

You deployed a site-to-site IPsec VPN connecting two data centers together using SRX5800s. After examining the performance of the IPsec VPN, you decide to enable IPsec performance acceleration to increase the rate of traffic that can be sent through the tunnel.

Referring to the exhibit, which two statements should you add to the configuration to accomplish this task? (Choose two.)

A
[edit security flow]
user@srx# set tcp-mss ipsec-vpn mss 65535
B
[edit security flow]
user@srx# set ipsec-performance-acceleration
C
[edit security flow]
user@srx# set power-mode-ipsec
D
[edit security flow]
user@srx# set load-distribution session-affinity ipsec

Reveal answer details Close answer details

Correct answersB, D

Explanation

References:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-improving-ipsec-vpn-traffic-performance.html

Question 6

Multiple choice

Which two statements are true about ADVPN members? (Choose two.)

A
ADVPN members are authenticated using pre-shared keys
B
ADVPN members are authenticated using certificates
C
ADVPN members can use IKEv2
D
ADVPN members can use IKEv1

Reveal answer details Close answer details

Correct answersB, C

Explanation

References:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discovery-vpns.html

Question 7

Multiple choice

You have a webserver and a DNS server residing in the same internal DMZ subnet. The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface. You implement
DNS doctoring to
ensure remote users can access the webserver.

Which two statements are true in this scenario? (Choose two.)

A
The DNS doctoring ALG is not enabled by default.
B
The Proxy ARP feature must be configured.
C
The DNS doctoring ALG is enabled by default.
D
The DNS CNAME record is translated.

Reveal answer details Close answer details

Correct answersB, C

Question 8

Single choice

When would you use the port-overloading-factor 1 setting?

A
to enable the port-overloading
B
to disable the port-overloading
C
to map ports with 1:1 ratio for port-overloading
D
to set the maximum port-overloading capacity to 65,536

Reveal answer details Close answer details

Correct answerC

Explanation

References:
https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/
security-edit-port-overloading-interface-source-nat.html

Question 9

Single choice

Click the Exhibit button.

Referring to the exhibit, what is the maximum number of zones that are able to be created within all logical systems?

A
74
B
34
C
40
D
17

Reveal answer details Close answer details

Correct answerC

Question 10

Multiple choice

Exhibit.

Referring to the exhibit, a spoke member of an ADVPN is not functioning correctly.

Which two commands will solve this problem? (Choose two.)

A
[edit interfaces]
user@srx# delete st0.0 multipoint
B
[edit security ike gateway advpn-gateway]
user@srx# delete advpn partner
C
[edit security ike gateway advpn-gateway]
user@srx# set version v1-only
D
[edit security ike gateway advpn-gateway]
user@srx# set advpn suggester disable

Reveal answer details Close answer details

Correct answersB, D

Explanation

References:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discovery-vpns.html

Question 11

Multiple choice

Click the Exhibit button.

Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)

A
Topology 3
B
Topology 5
C
Topology 2
D
Topology 4
E
Topology 1

Reveal answer details Close answer details

Correct answersA, D, E

Explanation

References:
https://www.juniper.net/documentation/en_US/junos-space17.2/policy-enforcer/topics/concept/
policy-enforcer-deployment-supported-topologies.html

Question 12

Single choice

You have downloaded and initiated the installation of the application package for the JATP Appliance on an SRX1500. You must confirm that the installation of the application package has completed successfully.

In this scenario, which command would you use to accomplish this task?

A
show services application-identification version
B
show services application-identification application detail
C
show services application-identification application version
D
show services application-identification status

Reveal answer details Close answer details

Correct answerD

Explanation

References:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-predefined-signatures.html

Question 13

Single choice

You must implement an IPsec VPN on an SRX Series device using PKI certificates for authentication. As part of the implementation, you are required to ensure that the certificate submission, renewal, and retrieval processes are handled automatically from the certificate authority.
In this scenario, which statement is correct.

A
You can use CRL to accomplish this behavior.
B
You can use SCEP to accomplish this behavior.
C
You can use OCSP to accomplish this behavior.
D
You can use SPKI to accomplish this behavior.

Reveal answer details Close answer details

Correct answerB

Explanation

Certificate Renewal
The renewal of certificates is much the same as initial certificate enrollment except you are just replacing an old certificate (about to expire) on the VPN device with a new certificate. As with the initial certificate request, only manual renewal is supported. SCEP can be used to re-enroll local certificates automatically before they expire. Refer to Appendix D for more details.

Question 14

Single choice

Click the Exhibit button.

Which statement is correct regarding the information show in the exhibit?

A
The tunnel binding was discovered automatically
B
The output is for an ADVPN
C
The tunnel gateway address was automatically discovered
D
The tunnel is not encrypting the traffic

Reveal answer details Close answer details

Correct answerB

Explanation

References:
https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/
show-security-ipsec-next-hop-tunnels.html

VOL	TYPE	QUESTIONS
1	Single choice	6
2	Multiple choice	8

Free JN0-635 Exam Dumps Preview

Security, Professional (JNCIP-SEC)

PREVIEW CONTENTS · 2 VOLUMES

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9

QUESTION 10

QUESTION 11

QUESTION 12

QUESTION 13

QUESTION 14