JN0-636無料問題集「Juniper Security, Professional (JNCIP-SEC)」

質問 1

You are asked to detect domain generation algorithms
Which two steps will accomplish this goal on an SRX Series firewall? (Choose two.)

（A）Define a security-metadata-streaming policy under [edit

（B）Attach the security-metadata-streaming policy to a security

（C）Define an advanced-anti-malware policy under [edit services].

（D）Attach the advanced-anti-malware policy to a security policy.

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

You are asked to deploy Juniper atp appliance in your network. You must ensure that incidents and alerts are sent to your SIEM.
In this scenario, which logging output format is supported?

（A）CEF

（B）JSON

（C）binay

（D）WELF

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

You must setup a Ddos solution for your ISP. The solution must be agile and not block legitimate traffic.
Which two products will accomplish this task? (Choose two.)

（A）Contrail Insights

（B）SRX Series device

（C）Corero Smartwall TDD

（D）MX Series device

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Exhibit

You are trying to configure an IPsec tunnel between SRX Series devices in the corporate office and branch1. You have committed the configuration shown in the exhibit, but the IPsec tunnel is not establishing.
In this scenario, what would solve this problem.

（A）Change the local identity to inet advpn on the branch1 device.

（B）Change the IKE proposal-set to compatible on the branch1 and corporate devices.

（C）Change the IKE mode to aggressive on the branch1 and corporate devices.

（D）Add multipoint to the st0.0 interface configuration on the branch1 device.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Exhibit.

Referring to the exhibit, which two statements are true? (Choose two.)

（A）The configured solution allows IPv4 to IPv6 translation.

（B）The configured solution allows IPv6 to IPv4 translation.

（C）External hosts cannot initiate contact.

（D）The IPv6 address is invalid.

正解：B、D 解答を投票する

質問 6

You want to use selective stateless packet-based forwarding based on the source address.
In this scenario, which command will allow traffic to bypass the SRX Series device flow daemon?

（A）set firewall family inet filter bypaa3_flowd term t1 then skip-services accept

（B）set firewall family inet filter bypass__f lowd term t1 then packet-mode

（C）set firewall family inet filter bypas3_flowd term t1 then virtual-channel stateless

（D）set firewall family inet filter bypass_flowd term t1 then routing-instance stateless

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

You want to enable inter-tenant communica􀆟on with tenant system.
In this Scenario, Which two solutions will accomplish this task?

（A）external router

（B）logical tunnel interface

（C）interconnect EVPN switch

（D）interconnect VPLS switch

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Exhibit

You are asked to establish an IBGP peering between the SRX Series device and the router, but the session is not being established. In the security flow trace on the SRX device, packet drops are observed as shown in the exhibit.
What is the correct action to solve the problem on the SRX device?

（A）Create a firewall filter to accept the BGP traffic

（B）Add BGP to the Allowed host-inbound-traffic for the interface

（C）Modify the security policy to allow the BGP traffic.

（D）Configure destination NAT for BGP traffic.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Click the Exhibit button.

Which type of NAT is shown in the exhibit?

（A）DS-Lite

（B）NAT64

（C）NAT46

（D）persistent NAT

正解：B 解答を投票する

質問 10

Exhibit:
You are troubleshooting a firewall filter shown in the exhibit that is intended to log all traffic and block only inbound telnet traffic on interface ge-0/0/3.
How should you modify the configuration to fulfill the requirements?

（A）Add a term before the log-all term that blocks Telnet

（B）Modify the log-all term to add the next term action

（C）Apply a firewall filter to the loopback interface that blocks Telnet traffic

（D）Delete the log-all term

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

JN0-636 無料問題集「Juniper Security, Professional (JNCIP-SEC)」

弊社を連絡する

関連リンク

トップ試験