JN0-637無料問題集「Juniper Security, Professional (JNCIP-SEC)」

質問 1

Click the Exhibit button.

Referring to the exhibit, which three actions do you need to take to isolate the hosts at the switch port level if they become infected with malware? (Choose three.)

（A）Deploy Security Director with Policy Enforcer.

（B）Deploy Juniper Secure Analytics.

（C）Use a third-party connector.

（D）Configure AppTrack on the SRX Series device.

（E）Enroll the SRX Series device with Juniper ATP Cloud.

正解：A、C、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

You have cloud deployments in Azure, AWS, and your private cloud. You have deployed multicloud using security director with policy enforcer to. Which three statements are true in this scenario? (Choose three.)

（A）You must secure the policies individually by domain.

（B）You can simultaneously manage the security policies in all three domains.

（C）You can run Juniper ATP scans only on traffic from your private cloud.

（D）The Policy Enforcer is able to flag infected hosts in all three domains.

（E）You can run Juniper ATP scans for all three domains.

正解：B、D、E 解答を投票する

質問 3

Exhibit:

Your company uses SRX Series devices to establish an IPsec VPN that connects Site-1 and the HQ networks. You want VoIP traffic to receive priority over data traffic when it is forwarded across the VPN.
Which three actions should you perform in this scenario? (Choose three.)

（A）Enable next-hop tunnel binding.

（B）Enable the copy-outer-dscp parameter so that DSCP header values are copied to the tunneled packets.

（C）Enable the multi-sa parameter to enable two separate IPsec SAs for the VoIP and data traffic.

（D）Configure CoS forwarding classes and scheduling parameters.

（E）Create a firewall filter that identifies VoIP traffic and associates it with the correct forwarding class.

正解：C、D、E 解答を投票する

質問 4

Which role does an SRX Series device play in a DS-Lite deployment?

（A）Softwire initiator

（B）STUN server

（C）Softwire concentrator

（D）STUN client

正解：C 解答を投票する

質問 5

Which two elements are necessary to configure a rule under an APBR profile? (Choose Two)

（A）instance type

（B）RIB group

（C）match condition

（D）then action

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Exhibit:

Which two statements are correct about the output shown in the exhibit. (Choose Two)

（A）The data shown requires a traceoptions flag of basic-datapath.

（B）The packet is dropped by the default security policy.

（C）The packet is dropped by a configured security policy.

（D）The data shown requires a traceoptions flag of host-traffic.

正解：A、B 解答を投票する

質問 7

You Implement persistent NAT to allow any device on the external side of the firewall to initiate traffic.

Referring to the exhibit, which statement is correct?

（A）The port-overloading parameter needs to be turned off in the NAT source interface configuration

（B）The target-host parameter should be used instead of the any-remote-host parameter.

（C）The any-remote-host parameter does not support interface-based NAT and needs an IP pod to work.

（D）The target-host-port parameter should be used instead of the any-remote-host parameter

正解：C 解答を投票する

質問 8

You are asked to select a product offered by Juniper Networks that can collect and assimilate data from all probes and determine the optimal links for different applications to maximize the full potential of AppQoE.
Which product provides this capability?

（A）Security Director Insights

（B）Mist

（C）Network Director

（D）Security Director

正解：B 解答を投票する

質問 9

You want to test how the device handles a theoretical session without generating traffic on the Junos security device.
Which command is used in this scenario?

（A）request security policies check

（B）show security match-policies

（C）show security policies

（D）show security flow session

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Exhibit:

Referring to the exhibit, a default static route on SRX-1 sends all traffic to ISP-A. You have configured APBR to send all requests for streaming video traffic to ISP-B. However, the return traffic from the streaming video server is coming through ISP-A, and the traffic is being dropped by SRX-1. You can only make changes on SRX-1.
How do you solve this problem?

（A）Enable AppTrack to keep track of the sessions and zones for the streaming video traffic.

（B）Change the APBR routing instance from a forwarding instance to a virtual router instance.

（C）Place both ISP-facing interfaces in the same zone.

（D）Configure BGP to control the return path of the streaming video traffic.

正解：D 解答を投票する

JN0-637 無料問題集「Juniper Security, Professional (JNCIP-SEC)」

弊社を連絡する

関連リンク

トップ試験