2022年更新のJunos Securityが有効なJN0-635問題集を無料提供しています [Q50-Q66]

2022年更新のJunos Securityが有効なJN0-635問題集を無料提供しています

最新のFast2test JN0-635のPDF問題集をダウンロードしちゃおう：https://jp.fast2test.com/JN0-635-premium-file.html（173問題と解答)

Juniper JN0-635 認定試験の出題範囲：

トピック	出題範囲
トピック 1	Describe the concepts, operation, or functionality of firewall filters and ACLs Malicious lateral traffic identification or mitigation
トピック 2	Demonstrate how to troubleshoot or monitor security policies or security zones Describe the concepts or operation of security compliance
トピック 3	Describe the concepts, operation, or functionality of edge security features demonstrate how to configure, troubleshoot, or monitor advanced NAT scenarios
トピック 4	Describe the concepts, operation, or functionality of Juniper ATP Demonstrate how to configure, troubleshoot, or monitor firewall filters
トピック 5	Demonstrate how to configure or monitor Layer 2 security Malware identification or mitigation Describe the concepts, operation, or functionality of the logical systems
トピック 6	Describe the concepts, operation, or functionality of threat mitigation Advanced Network Address Translation
トピック 7	Demonstrate how to configure or monitor Juniper ATP Remote access VPNs Routing with IPsec Dynamic gateways
トピック 8	Demonstrate how to configure, troubleshoot, or monitor advanced IPsec functionality Overlapping IP addresses
トピック 9	Selective packet processing, Filter-based forwarding, Troubleshooting with firewall filters demonstrate how to configure or monitor threat mitigation

質問 50
Click the Exhibit button.

You have two hosts on the same subnet connecting to an SRX340 on interfaces ge-0/0/4 and ge-
0/0/5. However, the two hosts cannot communicate with each other.
Referring to the exhibit, what are two actions that would solve this problem? (Choose two.)

A. Add an IRB interface to the VLAN
B. Remove the ge-0/0/4 and ge-0/0/5 interfaces from the L2 security zone
C. Put the ge-0/0/4 and ge-0/0/5 interfaces in different VLANs
D. Set the SRX340 to Ethernet switching mode and reboot

正解: B,D

質問 51
Your organization has multiple Active Directory domains to control user access. You must ensure that security policies are passing traffic based upon the users' access rights.
What would you use to assist your SRX Series devices to accomplish this task?

A. JATP Appliance
B. JSA
C. JIMS
D. Junos Space

正解: C

質問 52
Click the Exhibit button.

The IKE policy and proposal are configured properly on both devices as shown in the exhibit.
Which configuration snippet will complete the IKE configuration on the branch SRX Series device?

正解: C

質問 53
Click the Exhibit button.

Referring to the exhibit, which IPS deployment mode is running on the SRX5800 device?

A. integrated mode
B. in-line tap mode
C. sniffer mode
D. monitor mode

正解: A

質問 54
You are asked to implement the session cache feature on an SRX5400.
In this scenario, what information does a session cache entry record? (Choose two.)

A. To which SPU the traffic of the session should be forwarded
B. The type of processing to do for ingress traffic
C. The type of processing to do for egress traffic
D. To which NPU the traffic of the session should be forwarded

正解: A,C

解説:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-packet-based- forwarding.html

質問 55
According to the log shown in the exhibit, you notice the IPsec session is not establishing.
What is the reason for this behavior?

A. Mismatched preshared key
B. Incorrect peer address.
C. Mismatched peer ID
D. Mismatched proxy ID

正解: C

解説:
Reference:
https://www.juniper.net/documentation/en_US/release-independent/nce/topics/example/policy-based-vpn-using-j-series-srxseries-device-configuring.html

質問 56
When would you use the port-overloading-factor 1 setting?

A. to set the maximum port-overloading capacity to 65,536
B. to enable the port-overloading
C. to disable the port-overloading
D. to map ports with 1:1 ratio for port-overloading

正解: D

質問 57
Click the Exhibit button.

Which type of NAT is shown in the exhibit?

A. NAT64
B. persistent NAT
C. DS-Lite
D. NAT46

正解: A

質問 58
Which two statements about the integrated user firewall feature of the Junos OS are true?
(Choose two.)

A. IPv6 addresses are not supported.
B. The maximum number of supported active directory servers is ten.
C. The maximum number of supported active directory servers is five.
D. IPv6 addresses are supported.

正解: B,D

解説:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-user-auth- intergrated-user-firewall-overview.html

質問 59
Which three components are part of the AppSecure services suite? (Choose three.)

A. Sky ATP
B. IDP
C. Web filtering
D. AppQoS
E. AppFW

正解: B,D,E

解説:
https://www.oreilly.com/library/view/juniper-srx-
series/9781449339029/ch12.html#appsecure_service_models

質問 60
Click the Exhibit button.

The exhibit shows a snippet of a security flow trace. A user cannot open an SSH session to a server. Which action will solve the problem?

A. Create a route to the desired server
B. Create a route entry to direct traffic into the configured tunnel
C. Edit the source NAT to correct the translated address
D. Create a security policy that matches the traffic parameters

正解: D

質問 61
Click the Exhibit button.

Referring to the exhibit, what is the maximum number of zones that are able to be created within all logical systems?

A. 0
B. 1
C. 2
D. 3

正解: D

質問 62
You have configured a log collector VM and Security Director. System logging is enabled on a branch SRX Series device, but security logs do not appear in the monitor charts.
How would you solve this problem?

A. Configure J-Flow on the SRX Series device.
B. Configure a security policy to forward logs to the collector.
C. Configure security logging on the SRX Series device.
D. Configure application identification on the SRX Series device.

正解: C

質問 63
You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restricted to the VLANs from which they originate.
Which configuration accomplishes these objectives?
A)

B)

C)

D)

A. Option C
B. Option A
C. Option D
D. Option B

正解: D

質問 64
Click the Exhibit button.

You have two hosts on the same subnet connecting to an SRX340 on interfaces ge-0/0/4 and ge-0/0/5. However, the two hosts cannot communicate with each other.
Referring to the exhibit, what are two actions that would solve this problem? (Choose two.)