JN0-636問題集、Juniper実際の試験問題

質問 1

You want traffic to avoid the flow daemon for administrative task.
In this scenario which two stateless service are available with selective stateless packet based service. (Choose Two)

A. IPsec

B. Layer 2 switching

C. IPv6 routing

D. IPv4 routing

正解: B,D

解説: (PassTest メンバーにのみ表示されます)

質問 2

Exhibit:

Referring to the exhibit, the operator user is unable to save configuration files to a usb stick the is plugged into SRX. What should you do to solve this problem?

A. Add the interface-control permission flag to the operation class

B. Add the system-control permission flag to the operation class

C. Add the floppy permission flag to the operations class

D. Add the system permission flag to the operation class

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 3

Exhibit

Referring to the exhibit, which two statements are true about the CAK status for the CAK named "FFFP"? (Choose two.)

A. SAK is not generated using this key.

B. CAK is not used for encryption and decryption of the MACsec session.

C. SAK is successfully generated using this key.

D. CAK is used for encryption and decryption of the MACsec session.

正解: A,B

解説: (PassTest メンバーにのみ表示されます)

質問 4

You are asked to allocate security profile resources to the interconnect logical system for it to work properly.
In this scenario, which statement is correct?

A. The NAT resources must be defined in the security profile for the interconnect logical system.

B. No resources are needed to be allocated to the interconnect logical system.

C. The resources must be calculated based on the amount of traffic that will flow between the logical systems.

D. The flow-session resource must be defined in the security profile for the interconnect logical system.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 5

you are connecting two remote sites to your corporate headquarters site. You must ensure that traffic passes corporate headquarter.

A. In this scenario, which VPN should be used?

B. a Layer 3 VPN with the corporate firewall acting as the hub device

C. full mesh IPsec VPNs with tunnels between all sites

D. a full mesh Layer 3 VPN with the BGP route reflector behind the corporate firewall device

E. hub-and-spoke IPsec VPN with the corporate firewall acting as the hub device

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 6

You have designed the firewall filter shown in the exhibit to limit SSH control traffic to yours SRX Series device without affecting other traffic.
Which two statement are true in this scenario? (Choose two.)

A. The filter should be applied as an output filter on the loopback interface.

B. Applying the filter will achieve the desired result.

C. Applying the filter will not achieve the desired result.

D. The filter should be applied as an input filter on the loopback interface.

正解: C,D

解説: (PassTest メンバーにのみ表示されます)

質問 7

You want to configure a threat prevention policy.
Which three profiles are configurable in this scenario? (Choose three.)

A. C&C profile

B. infected host profile

C. device profile

D. SSL proxy profile

E. malware profile

正解: A,B,E

解説: (PassTest メンバーにのみ表示されます)

質問 8

You have noticed a high number of TCP-based attacks directed toward your primary edge device. You are asked to configure the IDP feature on your SRX Series device to block this attack.
Which two IDP attack objects would you configure to solve this problem? (Choose two.)

A. Signature

B. Protocol anomaly

C. host

D. Network

正解: A,B

質問 9

Exhibit

You are validating bidirectional traffic flows through your IPsec tunnel. The 4546 session represents traffic being sourced from the remote end of the IPsec tunnel. The 4547 session represents traffic that is sourced from the local network destined to the remote network.
Which statement is correct regarding the output shown in the exhibit?

A. The remote gateway address for the IPsec tunnel is 10.20.20.2

B. The local gateway address for the IPsec tunnel is 10.20.20.2

C. The session information indicates that the IPsec tunnel has not been established

D. NAT is being used to change the source address of outgoing packets

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 10

Exhibit
<e ip="img_34.jpg"></e> A. The highlighted incident (arrow) shown in the exhibit shows a progression level of "Download" in the kill chain.
What are two appropriate mitigation actions for the selected incident? (Choose two.)

A. Immediate response required: Wipe infected endpoint hosts.

B. Immediate response required: Deploy IVP integration (if configured) to confirm if the endpoint has executed the malware and is infected.

C. Not an urgent action: Use IVP to confirm if machine is infected.

D. Immediate response required: Block malware IP addresses (download server or CnC server)

正解: B,D

解説: (PassTest メンバーにのみ表示されます)

Juniper Security, Professional (JNCIP-SEC) - JN0-636 模擬練習