JN0-635 Exam Training Practice Tests (Juniper Security, Professional (JNCIP-SEC))]

Question 1

A local user complains that they cannot connect to an FTP server on the DMZ network.
You investigate and confirm that the security policy allows FTP traffic from the trust zone to the DMZ zone.
What are two reasons for this problem? (Choose two.)

A. No security policy exists for traffic from the DMZ zone to the trust zone. B. The FTP server has no route back to the local network. C. No route is configured to the DMZ network. D. The FTP ALG is disabled.

Correct Answer: B,D

Question 2

Your manager has notices a drop in productivity and believes it is due to employees checking their social media feeds too frequently. You are asked to provide analytical statistics for this traffic within your network on an hourly basis.
Which AppSecure feature should be used to collect this information?

A. AppTrack B. AppFW C. APBR D. AppQoS

Correct Answer: A

Question 3

Click the Exhibit button.

Your organization requests that you direct Facebook traffic out a different link to ensure that the bandwidth for critical applications is protected.
Referring to the exhibit, which forwarding instance will be used on your SRX Series device?

A. R1 B. R2 C. inet.0 D. R3

Correct Answer: B

Question 4

You are asked to implement the session cache feature on an SRX5400.
In this scenario, what information does a session cache entry record? (Choose two.)

A. The type of processing to do for egress traffic B. To which SPU the traffic of the session should be forwarded C. To which NPU the traffic of the session should be forwarded D. The type of processing to do for ingress traffic

Correct Answer: A,B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

What is the required when deploying a log collector in Junos Space?

A. root user access to the log collector B. a shared log file directory on the log collector C. the IP address of interface eth1 on the log collector D. a distributed deployment of the log collector nodes

Correct Answer: A

Question 6

Which statement about transparent mode on an SRX340 is true?

A. Security policies applied to transparent mode zones require Layer 2 address matching. B. Screens are not supported in transparent mode security zones. C. All interfaces on the device must be configured with the ethernet-switching protocol family. D. You must reboot the device after configuring transparent mode.

Correct Answer: D

Question 7

Click the Exhibit button.

Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)

A. Topology 5 B. Topology 4 C. Topology 1 D. Topology 3 E. Topology 2

Correct Answer: B,C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

You want to route traffic between two newly created virtual routers without the use of logical systems using the configuration options on the SRX5800.
Which two methods of forwarding, between virtual routers, would you recommend? (Choose two.)

A. Use a RIB group to share the internal routing protocol routes from the master routing instance. B. Use a static route to forward traffic across virtual routers using the next-table option.
Enable the return route by using a RIB group. C. Connect a direct cable between boo physical interfaces, one in each virtual router and use static routes with thenext-hopcommand. D. Create static routes in each virtual router using thenext-tablecommand.

Correct Answer: C,D

Question 9

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

A. You can secure intra-VLAN traffic with a security policy on this device. B. You can secure inter-VLAN traffic with a security policy on this device. C. The device can pass Layer 2 and Layer 3 traffic at the same time. D. The device cannot pass Layer 2 and Layer 3 traffic at the same time.

Correct Answer: B,C

Question 10

Which feature of Sky ATP is deployed with Policy Enforcer?

A. software image snapshot support B. device inventory management C. service redundancy daemon configuration support D. zero-day threat mitigation

Correct Answer: D

Question 11

You have configured three logical tunnel interfaces in a tenant system on an SRX1500 device.
When committing the configuration, the commit fails.
In this scenario, what would cause this problem?

A. The SRX1500 device requires a tunnel PIC to allow for logical tunnel interfaces B. The SRX1500 device does not support more than two logical interfaces per tenant system C. There is no VPLS switch on the tenant system containing a peer It-0/0/0 interface D. There is no GRE tunnel between the tenant system and master system allowing SSH traffic

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Juniper Security, Professional (JNCIP-SEC) - JN0-635 Exam Practice Test