JN0-635無料問題集「Juniper Security, Professional (JNCIP-SEC)」

質問 1

In a Juniper ATP Appliance, what would be a reason for the mitigation rule to be in the failed- remove state?

（A）The Juniper ATP Appliance received an unknown error message from the SRX Series device

（B）The Juniper ATP Appliance was not able to obtain the config lock

（C）The Juniper ATP Appliance received a commit error message from the SRX Series device

（D）The Juniper ATP Appliance was not able to communicate with the SRX Series device

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

You have been notified by your colocation provider that your infrastructure racks will no longer be adjacent to each other.
In this scenario, which technology would you use to secure all Layer 2 and Layer 3 traffic between racks?

（A）IPsec

（B）GRE

（C）MACsec

（D）802.1BR

正解：C 解答を投票する

質問 3

Which three types of peer devices are supported for CoS-based IPsec VPNs? (Choose three.)

（A）third-party device

（B）branch SRX Series device

（C）cSRX

（D）high-end SRX Series device

（E）vSRX

正解：B、D、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

You are asked to configure an SRX Series device to bypass all security features for IP traffic from the engineering department.
Which firewall filter will accomplish this task?

（A）

（B）

（C）

（D）

正解：D 解答を投票する

質問 5

Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high available chassis cluster and are configured for IPS. There has been a node failover.
In this scenario, which two statements are true? (Choose two.)

（A）Cached SSL session ID information for existing sessions is not synchronized between nodes.

（B）The IP action table is not synchronized between the chassis cluster nodes.

（C）The IP action table is synchronized between the chassis cluster nodes.

（D）Cached SSL session ID information for existing session is synchronized between nodes.

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Click the Exhibit button.

Referring to the exhibit, you are attempting to enable IPsec power mode to improve IPsec VPN performance. However, you are unable to use IPsec power mode.
What is the problem?

（A）IPsec power mode cannot be used with advanced services

（B）IPsec power mode cannot be used with high IPsec maximum segment size values

（C）IPsec power mode requires that you configure a policy-based VPN

（D）IPsec power mode cannot be used with IPsec performance acceleration

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

You are using destination NAT to translate the address of your HTTPS server to a private address on your SRX Series device. You have decided to implement IDP SSL decryption.
Upon enabling the decryption, you notice sessions are not decrypted.
Which action resolves the problem?

（A）Replace the server SSL certificate to use the public address.

（B）Enable the IDPsensor-configurationdetector to detect address translation.

（C）Increase the SSLsession-id-cache-timeoutvalue to any value greater than 5000 seconds.

（D）Reboot the SRX Series device.

正解：B 解答を投票する

質問 8

Which configurable SRX Series device feature allows you to capture transit traffic?

（A）archival

（B）traceoptions

（C）syslog

（D）packet-capture

正解：B 解答を投票する

質問 9

According to the log shown in the exhibit, you notice the IPsec session is not establishing.
What is the reason for this behavior?

（A）Mismatched preshared key

（B）Incorrect peer address.

（C）Mismatched peer ID

（D）Mismatched proxy ID

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

（A）The device cannot pass Layer 2 and Layer 3 traffic at the same time.

（B）You can secure intra-VLAN traffic with a security policy on this device.

（C）The device can pass Layer 2 and Layer 3 traffic at the same time.

（D）You can secure inter-VLAN traffic with a security policy on this device.

正解：C、D 解答を投票する

質問 11

You configured a security policy permitting traffic from the trust zone to the DMZ zone, inserted the new policy at the top of the list, and successfully committed it to the SRX Series device. Upon monitoring, you notice that the hit count does not increase on the newly configured policy.
In this scenario, which two commands would help you to identify the problem? (Choose two.)

（A）user@srx> show security shadow-policies from zone trust to zone DMZ

（B）user@srx> show security match-policies from-zone trust to-zone DMZ source-ip
192.168.10.100/32
destination-ip 10.10.10.80/32 protocol tcp source-port 5806 destination-port 443 result-count 10

（C）user@srx> show security match-policies from-zone trust to-zone DMZ source-ip
192.168.10.100/32
destination-ip 10.10.10.80/32 protocol tcp source-port 5806 destination-port

（D）user@srx> show security zones trust detail

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

Your manager asks you to show which attacks have been detected on your SRX Series device using the IPS feature.
Which command would you use to accomplish this task?

（A）show security idp counters

（B）show security idp memory

（C）show security idp attack detail

（D）show security idp attack table

正解：D 解答を投票する

質問 13

You are scanning files that are being transferred from the Internet to hosts on your internal network with Sky ATP. However, you notice that files that are 1 GB in size are not being scanned by Sky ATP.
In this scenario, which two statements are true? (Choose two.)

（A）The Sky ATP failback option is set to permit.

（B）The Sky ATP policy on the SRX Series device is misconfigured.

（C）The 1 GB file size is larger than the scan size limit for Sky ATP.

（D）The Sky ATP engine or the SRX Series device is too busy.

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 14

Click the Exhibit button.

When attempting to enroll an SRX Series device to JATP, you receive the error shown in the exhibit.
What is the cause of the error?

（A）The SRX Series device does not have an IP address assigned to the interface that accesses JATP

（B）A firewall is blocking HTTPS on fxp0

（C）The fxp0 IP address is not routable

（D）The SRX Series device certificate does not match the JATP certificate

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 15

To which three UTM components would the custom-objects parameter apply? (Choose three.)

（A）Sky ATP

（B）Web filtering

（C）content filtering

（D）antispam

（E）antivirus

正解：B、C、D 解答を投票する

JN0-635 無料問題集「Juniper Security, Professional (JNCIP-SEC)」

弊社を連絡する

関連リンク

トップ試験