JN0-636無料問題集「Juniper Security, Professional (JNCIP-SEC)」

質問 1

Exhibit

You are not able to ping the default gateway of 192.168 100 1 (or your network that is located on your SRX Series firewall.
Referring to the exhibit, which two commands would correct the configuration of your SRX Series device? (Choose two.)

（A）

（B）

（C）

（D）

正解：A、B 解答を投票する

質問 2

You are asked to download and install the IPS signature database to a device operating in chassis cluster mode. Which statement is correct in this scenario?

（A）The first synchronization of the backup node and the primary node must be performed manually.

（B）You must download and install the IPS signature package on the primary node.

（C）The IPS signature package must be downloaded and installed on the primary and backup nodes.

（D）The first time you synchronize the IPS signature package from the primary node to the backup node, the primary node must be rebooted.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Exhibit

You have recently configured Adaptive Threat Profiling and notice 20 IP address entries in the monitoring section of the Juniper ATP Cloud portal that do not match the number of entries locally on the SRX Series device, as shown in the exhibit.
What is the correct action to solve this problem on the SRX device?

（A）You must configure the DAE in a security policy on the SRX device.

（B）Force a manual download of the Proxy__Nodes feed.

（C）Refresh the feed in ATP Cloud.

（D）Flush the DNS cache on the SRX device.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Exhibit

An administrator wants to configure an SRX Series device to log binary security events for tenant systems.
Referring to the exhibit, which statement would complete the configuration?

（A）Configure the tenant as master for the pi security profile.

（B）Configure the tenant as local for the pi security profile

（C）Configure the tenant as TSYS1 for the pi security profile.

（D）Configure the tenant as root for the pi security profile.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which two types of source NAT translations are supported in this scenario? (Choose two.)

（A）translation of IPv4 hosts to IPv6 hosts with or without port address translation

（B）translation of one IPv6 subnet to another IPv6 subnet without port address translation

（C）translation of one IPv4 subnet to one IPv6 subnet with port address translation

（D）translation of one IPv6 subnet to another IPv6 subnet with port address translation

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Exhibit.

Referring to the exhibit, a spoke member of an ADVPN is not functioning correctly.
Which two commands will solve this problem? (Choose two.)

（A）[edit security ike gateway advpn-gateway]
user@srx# set advpn suggester disable

（B）[edit interfaces]
user@srx# delete st0.0 multipoint

（C）[edit security ike gateway advpn-gateway]
user@srx# set version v1-only

（D）[edit security ike gateway advpn-gateway]
user@srx# delete advpn partner

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

You have the NAT rule, shown in the exhibit, applied to allow communication across an IPsec tunnel between your two sites with identical networks. Which statement is correct in this scenario?

（A）The NAT rule in applied to the N/A routing instance.

（B）The NAT rule will only translate two addresses at a time.

（C）10 packets have been processed by the NAT rule.

（D）The NAT rule with translate the source and destination addresses.

正解：D 解答を投票する

質問 8

Exhibit

You configure Source NAT using a pool of addresses that are in the same subnet range as the external ge-0/0/0 interface on your vSRX device. Traffic that is exiting the internal network can reach external destinations, but the return traffic is being dropped by the service provider router.
Referring to the exhibit, what must be enabled on the vSRX device to solve this problem?

（A）Proxy ARP

（B）Persistent NAT

（C）STUN

（D）DNS Doctoring

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

To analyze and detect malware, Juniper ATP Cloud performs which two functions? (Choose two.)

（A）antivirus scan: with a single vendor solution to see if the file contains any potential threats

（B）dynamic analysis: to see what happens if you execute the file in a real environment

（C）cache lookup: to see if the file is seen already and known to be malicious

（D）static analysis: to see what happens if you execute the file in a real environment

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

You must setup a Ddos solution for your ISP. The solution must be agile and not block legitimate traffic.
Which two products will accomplish this task? (Choose two.)

（A）Contrail Insights

（B）SRX Series device

（C）Corero Smartwall TDD

（D）MX Series device

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

JN0-636 無料問題集「Juniper Security, Professional (JNCIP-SEC)」

弊社を連絡する

関連リンク

トップ試験