Exit demo JN0-636 Service Provider Routing and Switching Professional (JNCIP-SP) PDF format · free preview

Juniper JN0-636 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/jn0-636.html

Question 1
Single choice

What is the purpose of the Switch Microservice of Policy Enforcer?

A.

to isolate infected hosts

B.

to enroll SRX Series devices with Juniper ATP Cloud

C.

to inspect traffic for malware

D.

to synchronize security policies to SRX Series devices

Question 2
Multiple choice

Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)

A.

The data that traverses the ge-0/070 interface is secured by a secure association key.

B.

The data that traverses the ge-070/0 interface can be intercepted and read by anyone.

C.

The data that traverses the ge-070/0 interface cannot be intercepted and read by anyone.

D.

The data that traverses the ge-O/0/0 interface is secured by a connectivity association key.

Question 3
Single choice

You are asked to look at a configuration that is designed to take all traffic with a specific source ip address and forward the traffic to a traffic analysis server for further evaluation. The configuration is no longer working as intended.

Referring to the exhibit which change must be made to correct the configuration?

A.

Apply the filter as in input filter on interface xe-0/2/1.0

B.

Apply the filter as in input filter on interface xe-0/0/1.0

C.

Create a routing instance named default

D.

Apply the filter as in output filter on interface xe-0/1/0.0

Question 4
Single choice

You have the NAT rule, shown in the exhibit, applied to allow communication across an IPsec tunnel between your two sites with identical networks.

Which statement is correct in this scenario?

A.

The NAT rule with translate the source and destination addresses.

B.

The NAT rule will only translate two addresses at a time.

C.

The NAT rule in applied to the N/A routing instance.

D.

10 packets have been processed by the NAT rule.

Question 5
Single choice

Exhibit

Which statement is true about the output shown in the exhibit?

A.

The SRX Series device is configured with default security forwarding options.

B.

The SRX Series device is configured with packet-based IPv6 forwarding options.

C.

The SRX Series device is configured with flow-based IPv6 forwarding options.

D.

The SRX Series device is configured to disable IPv6 packet forwarding.

Question 6
Multiple choice

Which two features would be used for DNS doctoring on an SRX Series firewall? (Choose two.)

A.

The DNS ALG must be enabled.

B.

static NAT

C.

The DNS ALG must be disabled.

D.

source NAT

Question 7
Single choice

Exhibit

Referring to the exhibit, an internal host is sending traffic to an Internet host using the 203.0.113.1 reflexive address with source port 54311.

Which statement is correct in this situation?

A.

Only the Internet host that the internal host originally communicated with can initiate traffic to reach the internal host using the 203.0.113.1 address, source port 54311, and a random destination port.

B.

Only the Internet host that the internal host originally communicated with can initiate traffic to reach the internal host using the 203.0 113.1 address, a random source port, and destination port 54311.

C.

Any host on the Internet can initiate traffic to reach the internal host using the 203.0.113.1 address, source port 54311, and a random destination port.

D.

Any host on the Internet can initiate traffic to reach the internal host using the 203.0.113.1 address, a random source port, and destination port 54311.

Question 8
Multiple choice

Exhibit

Your company recently acquired a competitor. You want to use using the same IPv4 address space as your company.

Referring to the exhibit, which two actions solve this problem? (Choose two)

A.

Configure static NAT on the SRX Series devices.

B.

Connect the competitor network using IPsec policy-based VPNs.

C.

Identify two neutral IPv4 address spaces for address translation.

D.

Configure IPsec Transport mode.

Question 9
Single choice

You want to enroll an SRX Series device with Juniper ATP Appliance. There is a firewall device in the path between the devices.
In this scenario, which port should be opened in the firewall device?

A.

8080

B.

443

C.

80

D.

22

Question 10
Single choice

Exhibit

You have configured the SRX Series device to switch packets for multiple directly connected hosts that are within the same broadcast domain However, the traffic between two hosts in the same broadcast domain are not matching any security policies Referring to the exhibit, what should you do to solve this problem?

A.

You must change the global mode to security switching mode.

B.

You must change the global mode to security bridging mode

C.

You must change the global mode to transparent bridge mode.

D.

You must change the global mode to switching mode.

Showing 10 of 92 questions · Unlock the full set