合格できるJuniper Security, Professional (JNCIP-SEC)試験最速合格保証最近更新されたFast2test問題集！
合格できるJN0-635試験の90問題で最適なFast2test出題問題
Juniper JN0-635 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
質問 46
Click the Exhibit button.
You have configured tenant systems on your SRX Series device.
Referring to the exhibit, which two actions should you take to facilitate inter-TSYS communication?
(Choose two.)
- A. Connect each TSYS with the interconnect switch by configuring INET configured logical tunnel interfaces in the interconnect switch
- B. Place the logical tunnel interfaces in a VPLS routing instance in the interconnect switch
- C. Place the logical tunnel interfaces in a virtual router routing instance in the interconnect switch
- D. Connect each TSYS with the interconnect switch by configuring Ethernet VPLS configured logical tunnel interfaces in the interconnect switch
正解: A,C
質問 47
Your organization has multiple Active Directory domain to control user access. You must ensure that security polices are passing traffic based upon the user's access rights.
What would you use to assist your SRX series devices to accomplish this task?
- A. JIMS
- B. JATP Appliance
- C. Junos Space
- D. JSA
正解: A
解説:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-user-auth-configure-jims.html
質問 48
Click the Exhibit button.
Referring to the exhibit, you are attempting to enable IPsec power mode to improve IPsec VPN performance.
However, you are unable to use IPsec power mode.
What is the problem?
- A. IPsec power mode cannot be used with high IPsec maximum segment size values
- B. IPsec power mode requires that you configure a policy-based VPN
- C. IPsec power mode cannot be used with IPsec performance acceleration
- D. IPsec power mode cannot be used with advanced services
正解: D
質問 49
You have configured static NAT for a webserver in your DMZ. Both internal and external users can reach the webserver using the webserver's IP address. However, only internal users can reach the webserver using the webserver's DNS name. When external users attempt to reach the webserver using the webserver's DNS name, an error message is received.
Which action would solve this problem?
- A. Disable Web filtering
- B. Modify the security policy
- C. Use DNS doctoring
- D. Use destination NAT instead of static NAT
正解: C
質問 50
You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restricted to the VLANs from which they originate.
Which configuration accomplishes these objectives?
A)
B)
C)
D)
- A. Option D
- B. Option A
- C. Option B
- D. Option C
正解: C
質問 51
You are asked to secure your network against TOR network traffic.
Which two Juniper products would accomplish this task? (Choose two.)
- A. Juniper ATP Appliance
- B. Contrail Edge
- C. Contrail Insights
- D. Juniper Sky ATP
正解: A,D
質問 52
Which two statements are true about ADVPN members? (Choose two.)
- A. ADVPN members are authenticated using pre-shared keys
- B. ADVPN members are authenticated using certificates
- C. ADVPN members can use IKEv2
- D. ADVPN members can use IKEv1
正解: B,C
解説:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discovery- vpns.html
質問 53
In which two ways are tenant systems different from logical systems? (Choose two.)
- A. Tenant systems have less scalability than logical systems
- B. Tenant systems have fewer routing features than logical systems
- C. Tenant systems have higher scalability than logical systems
- D. Tenant systems have more routing features than logical systems
正解: B,C
解説:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/tenant-systems- overview.html#:~:text=Although%20similar%20to%20logical%20systems,administrative%20domain%20for
%20security%20services
質問 54
Click the Exhibit button.
When attempting to enroll an SRX Series device to JATP, you receive the error shown in the exhibit.
What is the cause of the error?
- A. A firewall is blocking HTTPS on fxp0
- B. The SRX Series device does not have an IP address assigned to the interface that accesses JATP
- C. The fxp0 IP address is not routable
- D. The SRX Series device certificate does not match the JATP certificate
正解: B
解説:
Explanation/Reference: https://kb.juniper.net/InfoCenter/index?
page=content&id=KB33979&cat=JATP_SERIES&actp=LIST
質問 55
Click the Exhibit button.
Which type of NAT is shown in the exhibit?
- A. NAT46
- B. NAT64
- C. persistent NAT
- D. DS-Lite
正解: B
質問 56
Click the Exhibit button.
You have configured tenant systems on your SRX Series device.
Referring to the exhibit, which two actions should you take to facilitate inter-TSYS communication? (Choose two.)
- A. Connect each TSYS with the interconnect switch by configuring INET configured logical tunnel interfaces in the interconnect switch
- B. Place the logical tunnel interfaces in a VPLS routing instance in the interconnect switch
- C. Place the logical tunnel interfaces in a virtual router routing instance in the interconnect switch
- D. Connect each TSYS with the interconnect switch by configuring Ethernet VPLS configured logical tunnel interfaces in the interconnect switch
正解: A,C
質問 57
Click the Exhibit button.
A user is trying to reach a company's website, but the connection errors out. The security policies are configured correctly.
Referring to the exhibit, what is the problem?
- A. The action for rule 1 must change to static-nat inet
- B. Persistent NAT must be enabled
- C. Static NAT is missing a rule for DNS server
- D. DNS ALG must be disabled
正解: C
解説:
Explanation
質問 58
Click the Exhibit button.
When attempting to enroll an SRX Series device to JATP, you receive the error shown in the exhibit. What is the cause of the error?
- A. A firewall is blocking HTTPS on fxp0
- B. The SRX Series device does not have an IP address assigned to the interface that accesses JATP
- C. The fxp0 IP address is not routable
- D. The SRX Series device certificate does not match the JATP certificate
正解: B
質問 59
Click the Exhibit button.
Referring to the exhibit, which two statements are true? (Choose two.)
- A. The device can pass Layer 2 and Layer 3 traffic at the same time
- B. The device cannot pass Layer 2 and Layer 3 traffic at the same time
- C. You can secure intra-VLAN traffic with a security policy on this device
- D. You can secure inter-VLAN traffic with a security policy on this device
正解: B,C
解説:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/ethernet-port-switching- modes.html
質問 60
Exhibit.
A hub member of an ADVPN is not functioning correctly.
Referring the exhibit, which action should you take to solve the problem?
- A. [edit security]
user@hub-1# set ike gateway advpn-gateway advpn suggester disable - B. [edit interfaces]
user@hub-1# delete ipsec vpn advpn-vpn traffic-selector - C. [edit security]
user@hub-1# delete ike gateway advpn-gateway advpn partner - D. [edit interfaces]
root@vSRX-1# delete st0.0 multipoint
正解: B
質問 61
Click the Exhibit button.
Referring to the exhibit, you are attempting to enable IPsec power mode to improve IPsec VPN performance. However, you are unable to use IPsec power mode.
What is the problem?
- A. IPsec power mode cannot be used with high IPsec maximum segment size values
- B. IPsec power mode requires that you configure a policy-based VPN
- C. IPsec power mode cannot be used with IPsec performance acceleration
- D. IPsec power mode cannot be used with advanced services
正解: D
解説:
Explanation/Reference: https://www.juniper.net/documentation//en_US/junos/topics/reference/configuration-statement/ security-flow-power-mode-ipsec.html
質問 62
Click the Exhibit button.
The IKE policy and proposal are configured properly on both devices as shown in the exhibit. Which configuration snippet will complete the IKE configuration on the branch SRX Series device?
A)
B)
C)
D)
- A. Option D
- B. Option B
- C. Option A
- D. Option C
正解: A
質問 63
You have configured three logical tunnel interfaces in a tenant system on an SRX1500 device. When committing the configuration, the commit fails.
In this scenario, what would cause this problem?
- A. The SRX1500 device requires a tunnel PIC to allow for logical tunnel interfaces
- B. There is no VPLS switch on the tenant system containing a peer It-0/0/0 interface
- C. The SRX1500 device does not support more than two logical interfaces per tenant system
- D. There is no GRE tunnel between the tenant system and master system allowing SSH traffic
正解: B
質問 64
Click the Exhibit button.
You deployed a site-to-site IPsec VPN connecting two data centers together using SRX5800s. After examining the performance of the IPsec VPN, you decide to enable IPsec performance acceleration to increase the rate of traffic that can be sent through the tunnel.
Referring to the exhibit, which two statements should you add to the configuration to accomplish this task?
(Choose two.)
[edit security flow]
- A. user@srx# set ipsec-performance-acceleration
[edit security flow] - B. user@srx# set tcp-mss ipsec-vpn mss 65535
[edit security flow] - C. user@srx# set load-distribution session-affinity ipsec
- D. user@srx# set power-mode-ipsec
[edit security flow]
正解: A,C
解説:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-improving-ipsec- vpn-traffic-performance.html
質問 65
Click the Exhibit button.
A host is unable to communicate with a webserver. Referring to the exhibit, which statement is correct?
- A. A session is created for this flow
- B. The webserver is not listening for traffic on port 80
- C. A policy is denying the traffic between these two hosts
- D. The session table is running out of resources
正解: C
質問 66
Click the Exhibit button.
Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)
- A. Topology 3
- B. Topology 4
- C. Topology 2
- D. Topology 1
- E. Topology 5
正解: A,B,D
解説:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos-space17.2/policy-enforcer/topics/concept/ policy-enforcer-deployment-supported-topologies.html
質問 67
You are asked to configure an IPsec VPN between two SRX Series devices that allows for processing of CoS on the intermediate routers.
What will satisfy this requirement?
- A. remote access VPN
- B. policy-based VPN
- C. route-based VPN
- D. OpenVPN
正解: C
解説:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/secuirty-cos-based-ipsec- vpns.html
質問 68
Click the Exhibit button.
You have two hosts on the same subnet connecting to an SRX340 on interfaces ge-0/0/4 and ge-0/0/5. However, the two hosts cannot communicate with each other.
Referring to the exhibit, what are two actions that would solve this problem? (Choose two.)
- A. Put the ge-0/0/4 and ge-0/0/5 interfaces in different VLANs
- B. Remove the ge-0/0/4 and ge-0/0/5 interfaces from the L2 security zone
- C. Add an IRB interface to the VLAN
- D. Set the SRX340 to Ethernet switching mode and reboot
正解: B,D
質問 69
Click the Exhibit button.
The IKE policy and proposal are configured properly on both devices as shown in the exhibit. Which configuration snippet will complete the IKE configuration on the branch SRX Series device?
A)
B)
C)
D)
- A. Option D
- B. Option B
- C. Option A
- D. Option C
正解: A
質問 70
Click the Exhibit button.
Referring to the exhibit, which two statements are true? (Choose two.)
- A. The SRX Series device is enrolled and communicating with a JATP Appliance
- B. The SRX Series device cannot download the security feeds from the JATP Appliance
- C. The JATP Appliance cannot download the security feeds from the GSS servers
- D. The SRX Series device is not enrolled but can communicate with the JATP Appliance
正解: B,D
質問 71
......
合格突破受験者シミュレーションされたJN0-635試験問題集：https://jp.fast2test.com/JN0-635-premium-file.html
無料テストエンジンはSecurity, Professional (JNCIP-SEC)認定試験：https://drive.google.com/open?id=1xGPtzsI7EDT7KaxkYuDx8b6BFI8pT7xK