JN0-636無料問題集「Juniper Security, Professional (JNCIP-SEC)」

質問 1

Your Source NAT implementation uses an address pool that contains multiple IPv4 addresses Your users report that when they establish more than one session with an external application, they are prompted to authenticate multiple times External hosts must not be able to establish sessions with internal network hosts What will solve this problem?

（A）Enable address persistence.

（B）Enable persistent NAT

（C）Enable destination NAT.

（D）Disable PAT.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Exhibit

Which two statements are correct about the output shown in the exhibit? (Choose two.)

（A）The packet matches the default security policy.

（B）The packet matches a configured security policy.

（C）The packet is processed in the first path packet flow.

（D）The packet is processed as host inbound traffic.

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Exhibit:
Referring to the exhibit, which two statements are correct?

（A）All of the entries are a threat level 8

（B）All of the entries are a threat level 10.

（C）All of the entries are command and control entries.

（D）All of the entries are Dshield entries

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

You are asked to allocate security profile resources to the interconnect logical system for it to work properly.
In this scenario, which statement is correct?

（A）The resources must be calculated based on the amount of traffic that will flow between the logical systems.

（B）The flow-session resource must be defined in the security profile for the interconnect logical system.

（C）No resources are needed to be allocated to the interconnect logical system.

（D）The NAT resources must be defined in the security profile for the interconnect logical system.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

You are asked to download and install the IPS signature database to a device operating in chassis cluster mode. Which statement is correct in this scenario?

（A）The first synchronization of the backup node and the primary node must be performed manually.

（B）You must download and install the IPS signature package on the primary node.

（C）The IPS signature package must be downloaded and installed on the primary and backup nodes.

（D）The first time you synchronize the IPS signature package from the primary node to the backup node, the primary node must be rebooted.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Exhibit:
The security trace options configuration shown in the exhibit is committed to your SRX series firewall. Which two statements are correct in this Scenario? (Choose Two)

（A）The file debugger will be readable by all users.

（B）Once the trace has generated 10 log files, the trace process will halt.

（C）Once the trace has generated 10 log files, older logs will be overwritten.

（D）The file debugger will be readable only by the user who committed this configuration

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

You are requested to enroll an SRX Series device with Juniper ATP Cloud.
Which statement is correct in this scenario?

（A）Juniper ATP Cloud uses a Junos OS op script to help you configure your SRX Series device to connect to the Juniper ATP Cloud service.

（B）When the license expires, the SRX Series device is disenrolled from Juniper ATP Cloud without a grace period

（C）If a device is already enrolled in a realm and you enroll it in a new realm, the device data or configuration information is propagated to the new realm.

（D）The only way to enroll an SRX Series device is to interact with the Juniper ATP Cloud Web portal.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Your company wants to use the Juniper Seclntel feeds to block access to known command and control servers, but they do not want to use Security Director to manage the feeds.
Which two Juniper devices work in this situation? (Choose two)

（A）EX Series devices

（B）MX Series devices

（C）QFX Series devices

（D）SRX Series devices

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

The monitor traffic interface command is being used to capture the packets destined to and the from the SRX Series device.
In this scenario, which two statements related to the feature are true? (Choose two.)

（A）This feature does not capture transit traffic.

（B）This feature captures ICMP traffic to and from the SRX Series device.

（C）This feature is supported on high-end SRX Series devices only.

（D）This feature is supported on both branch and high-end SRX Series devices.

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Exhibit.

Referring to the exhibit, a spoke member of an ADVPN is not functioning correctly.
Which two commands will solve this problem? (Choose two.)

（A）[edit security ike gateway advpn-gateway]
user@srx# set advpn suggester disable

（B）[edit interfaces]
user@srx# delete st0.0 multipoint

（C）[edit security ike gateway advpn-gateway]
user@srx# set version v1-only

（D）[edit security ike gateway advpn-gateway]
user@srx# delete advpn partner

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

JN0-636 無料問題集「Juniper Security, Professional (JNCIP-SEC)」

弊社を連絡する

関連リンク

トップ試験