Download Juniper Security, Professional.VCEPlus.JN0-636.2023-01-11.1e.65q.vcex

Question 1

Exhibit

   

You are using traceoptions to verity NAT session information on your SRX Series device Referring to the exhibit, which two statements are correct? (Choose two.)

• A: This packet is part of an existing session.
• B: The SRX device is changing the source address on this packet from
• C: This is the first packet in the session
• D: The SRX device is changing the destination address on this packet 10.0.1 1 to 172 20.101.10.

Correct Answer: CD

Question 2

Exhibit

   

You are asked to establish an IBGP peering between the SRX Series device and the router, but the session is not being established. In the security flow trace on the SRX device, packet drops are observed as shown in the exhibit.
What is the correct action to solve the problem on the SRX device?

• A: Create a firewall filter to accept the BGP traffic
• B: Configure destination NAT for BGP traffic.
• C: Add BGP to the Allowed host-inbound-traffic for the interface
• D: Modify the security policy to allow the BGP traffic.

Correct Answer: A

Question 3

SRX Series device enrollment with Policy Enforcer fails To debug further, the user issues the following command show configuration services security--intelligence url
https : //cloudfeeds . argon . juniperaecurity . net/api/manifeat. xmland receives the following output:
What is the problem in this scenario?

• A: The device is directly enrolled with Juniper ATP Cloud.
• B: The device is already enrolled with Policy Enforcer.
• C: The SRX Series device does not have a valid license.
• D: Junos Space does not have matching schema based on the

Correct Answer: C

Question 4

Exhibit

   

Referring to the exhibit, which three statements are true? (Choose three.)

• A: The packet's destination is to an interface on the SRX Series device.
• B: The packet's destination is to a server in the DMZ zone.
• C: The packet originated within the Trust zone.
• D: The packet is dropped before making an SSH connection.
• E: The packet is allowed to make an SSH connection.

Correct Answer: ACD

Question 5

Exhibit

   

You configure a traceoptions file called radius on your returns the output shown in the exhibit What is the source of the problem?

• A: An incorrect password is being used.
• B: The authentication order is misconfigured.
• C: The RADIUS server IP address is unreachable.
• D: The RADIUS server suffered a hardware failure.

Correct Answer: D

Question 6

Exhibit

   

You have configured the SRX Series device to switch packets for multiple directly connected hosts that are within the same broadcast domain However, the traffic between two hosts in the same broadcast domain are not matching any security policies Referring to the exhibit, what should you do to solve this problem?

• A: You must change the global mode to security switching mode.
• B: You must change the global mode to security bridging mode
• C: You must change the global mode to transparent bridge mode.
• D: You must change the global mode to switching mode.

Correct Answer: B

Question 7

You are asked to deploy filter-based forwarding on your SRX Series device for incoming traffic sourced from the 10.10 100 0/24 network in this scenario, which three statements are correct?
(Choose three.)

• A: You must create a forwarding-type routing instance.
• B: You must create and apply a firewall filter that matches on the source address 10.10.100.0/24 and then sends this traffic to your routing
• C: You must create and apply a firewall filter that matches on the destination address 10 10.100.0/24 and then sends this traffic to your routing instance.
• D: You must create a RIB group that adds interface routes to your routing instance.
• E: You must create a VRF-type routing instance.

Correct Answer: BCE

Question 8

You are connecting two remote sites to your corporate headquarters site. You must ensure that all traffic is secured and sent directly between sites In this scenario, which VPN should be used?

• A: IPsec ADVPN
• B: hub-and-spoke IPsec VPN
• C: Layer 2 VPN
• D: full mesh Layer 3 VPN with EBGP

Correct Answer: B

Question 9

You are asked to detect domain generation algorithms
Which two steps will accomplish this goal on an SRX Series firewall? (Choose two.)

• A: Define an advanced-anti-malware policy under [edit services].
• B: Attach the security-metadata-streaming policy to a security
• C: Define a security-metadata-streaming policy under [edit
• D: Attach the advanced-anti-malware policy to a security policy.

Correct Answer: AD

Question 10

In Juniper ATP Cloud, what are two different actions available in a threat prevention policy to deal with an infected host? (Choose two.)

• A: Send a custom message
• B: Close the connection.
• C: Drop the connection silently.
• D: Quarantine the host.

Correct Answer: CD