VCEdump

JN0-636 Service Provider Routing and Switching Professional (JNCIP-SP)

PDF question preview Back to product

Reading controls

Reader tools

Free demo

14 of 92 questions

Purchase the full version to unlock every question and answer.

View the full question set

Preview tools

Try Web TestEngine

Question formats

Single choice8

Multiple choice6

Juniper · JN0-636

Free JN0-636 Exam Dumps Preview

Preview real exam questions, verified answers and available explanations before choosing a study plan.

Question 1

Single choice

You are requested to enroll an SRX Series device with Juniper ATP Cloud.

Which statement is correct in this scenario?

A
If a device is already enrolled in a realm and you enroll it in a new realm, the device data or configuration information is propagated to the new realm.
B
The only way to enroll an SRX Series device is to interact with the Juniper ATP Cloud Web portal.
C
When the license expires, the SRX Series device is disenrolled from Juniper ATP Cloud without a grace period
D
Juniper ATP Cloud uses a Junos OS op script to help you configure your SRX Series device to connect to the Juniper ATP Cloud service.

Reveal answer details Close answer details

Correct answerD

Question 2

Single choice

Your company uses non-Juniper firewalls and you are asked to provide a Juniper solution for zero-day malware protection.

Which solution would work in this scenario?

A
Juniper ATP Cloud
B
Juniper Secure Analytics
C
Juniper ATP Appliance
D
Juniper Security Director

Reveal answer details Close answer details

Correct answerA

Explanation

Explanation: Juniper ATP Cloud provides zero-day malware protection for non-Juniper firewalls. It's a cloud-based service that analyzes files and network traffic to detect and prevent known and unknown (zero-day) threats. It uses a combination of static and dynamic analysis techniques, as well as machine learning, to detect and block malicious files, even if they are not known to traditional anti-virus software. It also provides real-time visibility and detailed forensics for incident response and remediation.

Question 3

Single choice

You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restricted to the VLANs from which they originate.

Which configuration accomplishes these objectives?

A
Option A
B
Option B
C
Option C
D
Option D

Reveal answer details Close answer details

Correct answerD

Explanation

https://www.juniper.net/documentation/us/en/software/junos/multicast-l2/topics/ref/statement/family-ethernet-switching-edit-interfaces-qfx-series.html#statement-name-statement__d26608e73

Question 4

Single choice

Click the Exhibit button.

When attempting to enroll an SRX Series device to JATP, you receive the error shown in the exhibit.

What is the cause of the error?

A
The fxp0 IP address is not routable
B
The SRX Series device certificate does not match the JATP certificate
C
The SRX Series device does not have an IP address assigned to the interface that accesses JATP
D
A firewall is blocking HTTPS on fxp0

Reveal answer details Close answer details

Correct answerC

Explanation

References:
https://kb.juniper.net/InfoCenter/index?page=content&id=KB33979&cat=JATP_SERIES&actp=LIST

Question 5

Multiple choice

Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)

A
The SRX-1 device can use the Proxy__Nodes feed in another security policy.
B
You can use the Proxy_Nodes feed as the source-address and destination-address match criteria of another security policy on a different SRX Series device.
C
The SRX-1 device creates the Proxy_wodes feed, so it cannot use it in another security policy.
D
You can only use the Proxy_Node3 feed as the destination-address match criteria of another security policy on a different SRX Series device.

Reveal answer details Close answer details

Correct answersA, C

Question 6

Multiple choice

Exhibit

Which two statements are correct about the output shown in the exhibit? (Choose two.)

A
The packet is silently discarded.
B
The packet is part of an existing session.
C
The packet is part of a new session.
D
The packet is explicitly rejected.

Reveal answer details Close answer details

Correct answersC, D

Question 7

Single choice

Exhibit

You configure Source NAT using a pool of addresses that are in the same subnet range as the external ge-0/0/0 interface on your vSRX device. Traffic that is exiting the internal network can reach external destinations, but the return traffic is being dropped by the service provider router.

Referring to the exhibit, what must be enabled on the vSRX device to solve this problem?

A
STUN
B
Proxy ARP
C
Persistent NAT
D
DNS Doctoring

Reveal answer details Close answer details

Correct answerD

Question 8

Multiple choice

Your company wants to use the Juniper Seclntel feeds to block access to known command and control servers, but they do not want to use Security Director to manage the feeds.

Which two Juniper devices work in this situation? (Choose two)

A
EX Series devices
B
MX Series devices
C
SRX Series devices
D
QFX Series devices

Reveal answer details Close answer details

Correct answersB, C

Explanation

Explanation: Juniper MX and SRX series devices support the integration of Seclntel feeds, which provide information about known command and control servers, for the purpose of blocking access to them. These devices can be configured to use the Seclntel feeds without the need for Security Director to manage the feeds. EX series and QFX series devices are not capable of working in this situation, as they do not support the integration of Seclntel feeds.

Question 9

Single choice

While troubleshooting security policies, you added the count action.

Where do you see the result of this action?

A
In the show security policies hit-count command output.
B
In the show security flow statistics command output.
C
In the show security policies detail command output.
D
In the show firewall log command output.

Reveal answer details Close answer details

Correct answerA

Question 10

Multiple choice

Click the Exhibit button.

Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)

A
Topology 3
B
Topology 5
C
Topology 2
D
Topology 4
E
Topology 1

Reveal answer details Close answer details

Correct answersA, D, E

Explanation

References:
https://www.juniper.net/documentation/en_US/junos-space17.2/policy-enforcer/topics/concept/
policy-enforcer-deployment-supported-topologies.html

Question 11

Single choice

Exhibit

Which statement is true about the output shown in the exhibit?

A
The SRX Series device is configured with default security forwarding options.
B
The SRX Series device is configured with packet-based IPv6 forwarding options.
C
The SRX Series device is configured with flow-based IPv6 forwarding options.
D
The SRX Series device is configured to disable IPv6 packet forwarding.

Reveal answer details Close answer details

Correct answerA

Question 12

Multiple choice

Exhibit

Your company recently acquired a competitor. You want to use using the same IPv4 address space as your company.

Referring to the exhibit, which two actions solve this problem? (Choose two)

A
Configure static NAT on the SRX Series devices.
B
Connect the competitor network using IPsec policy-based VPNs.
C
Identify two neutral IPv4 address spaces for address translation.
D
Configure IPsec Transport mode.

Reveal answer details Close answer details

Correct answersA, C

Question 13

Multiple choice

Which two features would be used for DNS doctoring on an SRX Series firewall? (Choose two.)

A
The DNS ALG must be enabled.
B
static NAT
C
The DNS ALG must be disabled.
D
source NAT

Reveal answer details Close answer details

Correct answersA, D

Explanation

Explanation: DNS Doctoring is a feature that allows a firewall to rewrite the source IP address of DNS requests to match the address of the interface on which the request is received. In order to achieve this two main features are used: The DNS ALG (Application Layer Gateway) must be enabled: The DNS ALG is responsible for tracking and modifying DNS requests and responses. It allows the SRX Series firewall to understand the DNS protocol and to be able to rewrite the source IP address of DNS requests.
Source NAT (Network Address Translation) is used: It is used to change the source IP address of the DNS request to match the address of the interface on which the request is received.

Question 14

Single choice

Exhibit

You are validating bidirectional traffic flows through your IPsec tunnel. The 4546 session represents traffic being sourced from the remote end of the IPsec tunnel. The 4547 session represents traffic that is sourced from the local network destined to the remote network.

Which statement is correct regarding the output shown in the exhibit?

A
The remote gateway address for the IPsec tunnel is 10.20.20.2
B
The session information indicates that the IPsec tunnel has not been established
C
The local gateway address for the IPsec tunnel is 10.20.20.2
D
NAT is being used to change the source address of outgoing packets

Reveal answer details Close answer details

Correct answerB

VOL	TYPE	QUESTIONS
1	Single choice	8
2	Multiple choice	6

Free JN0-636 Exam Dumps Preview

Service Provider Routing and Switching Professional (JNCIP-SP)

PREVIEW CONTENTS · 2 VOLUMES

QUESTION 1

QUESTION 2

QUESTION 3

QUESTION 4

QUESTION 5

QUESTION 6

QUESTION 7

QUESTION 8

QUESTION 9

QUESTION 10

QUESTION 11

QUESTION 12

QUESTION 13

QUESTION 14