100% Pass Your JN0-636 Exam Dumps at First Attempt with It-Tests [Q21-Q39] – IT Certification Exam Questions & Answers

Rate this post

100% Pass Your JN0-636 Exam Dumps at First Attempt with It-Tests

Penetration testers simulate JN0-636 exam PDF

NEW QUESTION 21
Which two statements are correct regarding tenant systems on SRX Series devices? (Choose two.)

A maximum of 32 tenant systems can be configured on a physical SRX device.

All tenant systems share a single routing protocol process.

Each tenant system runs its own instance of the routing protocol process

A maximum of 500 tenant systems can be configured on a physical SRX device.

NEW QUESTION 22
You want to enroll an SRX Series device with Juniper ATP Appliance. There is a firewall device in the path between the devices. In this scenario, which port should be opened in the firewall device?

8080

443

NEW QUESTION 23
You are requested to enroll an SRX Series device with Juniper ATP Cloud.
Which statement is correct in this scenario?

If a device is already enrolled in a realm and you enroll it in a new realm, the device data or configuration information is propagated to the new realm.

The only way to enroll an SRX Series device is to interact with the Juniper ATP Cloud Web portal.

When the license expires, the SRX Series device is disenrolled from Juniper ATP Cloud without a grace period

Juniper ATP Cloud uses a Junos OS op script to help you configure your SRX Series device to connect to the Juniper ATP Cloud service.

NEW QUESTION 24
Exhibit

You are using traceoptions to verity NAT session information on your SRX Series device Referring to the exhibit, which two statements are correct? (Choose two.)

This packet is part of an existing session.

The SRX device is changing the source address on this packet from

This is the first packet in the session

The SRX device is changing the destination address on this packet 10.0.1 1 to 172 20.101.10.

NEW QUESTION 25
Exhibit

Which two statements are correct about the output shown in the exhibit? (Choose two.)

The packet is processed as host inbound traffic.

The packet matches the default security policy.

The packet matches a configured security policy.

The packet is processed in the first path packet flow.

NEW QUESTION 26
Exhibit

You areasked to establish an IBGP peering between the SRX Series device and the router, but the session is not being established. In the security flow trace on the SRX device, packet drops are observed as shown in the exhibit.
What is the correct action to solve the problem on the SRX device?

Create a firewall filter to accept the BGP traffic

Configure destination NAT for BGP traffic.

Add BGP to the Allowed host-inbound-traffic for the interface

Modify the security policy to allow the BGP traffic.

NEW QUESTION 27
All interfaces involved in transparent mode are configured with which protocol family?

mpls

bridge

inet

ethernet – switching

NEW QUESTION 28
You want to configure a threat prevention policy.
Which three profiles are configurable in this scenario? (Choose three.)

device profile

SSL proxy profile

infected host profile

C&C profile

malware profile

NEW QUESTION 29
Regarding IPsec CoS-based VPNs, what is the number of IPsec SAs associated with a peer based upon?

The number of traffic selectors configured for the VPN.

The number of CoS queues configured for the VPN.

The number of classifiers configured for the VPN.

The number of forwarding classes configured for the VPN.

NEW QUESTION 30
Exhibit

Referring to the exhibit, which statement is true?

This custom block list feed will be used before the Juniper Seclntel

This custom block list feed cannot be saved if the Juniper Seclntel block list feed is configured.

This custom block list feed will be used instead of the Juniper Seclntel block list feed

This custom block list feed will be used after the Juniper Seclntel block list feed.

NEW QUESTION 31
Your Source NAT implementation uses an address pool that contains multiple IPv4 addresses Your users report that when they establish more than one session with an external application, they are prompted to authenticate multiple times External hosts must not be able to establish sessions with internal network hosts What will solve this problem?

Disable PAT.

Enable destination NAT.

Enable persistent NAT

Enable address persistence.

NEW QUESTION 32
Exhibit

An administrator wants to configure an SRX Series device to log binary security events for tenant systems.
Referring to the exhibit, which statement would complete the configuration?

Configure the tenant as TSYS1 for the pi security profile.

Configure the tenant as root for the pi security profile.

Configure the tenant as master for the pi security profile.

Configure the tenant as local for the pi security profile

NEW QUESTION 33
Exhibit

You have configured the SRX Series device to switch packets for multiple directly connected hosts that are within the same broadcast domain However, the traffic between two hosts in the same broadcast domain are not matching any security policies Referring to the exhibit, what should you do to solve this problem?

You must change the global mode to security switching mode.

You must change the global mode to security bridging mode

You must change the global mode to transparent bridge mode.

You must change the global mode to switching mode.

NEW QUESTION 34
Your company wants to use the Juniper Seclntel feeds to block access to known command and control servers, but they do not want to use Security Director to manage the feeds.
Which two Juniper devices work in this situation? (Choose two)

EX Series devices

MX Series devices

SRX Series devices

QFX Series devices

NEW QUESTION 35
Exhibit

You configure a traceoptions file called radius on your returns the output shown in the exhibit What is the source of the problem?

An incorrect password is being used.

The authentication order is misconfigured.

The RADIUS server IP address is unreachable.

The RADIUS server suffered a hardware failure.

NEW QUESTION 36
Exhibit

You have recently configured Adaptive Threat Profiling and notice 20 IP address entries in the monitoring section of the Juniper ATP Cloud portal that do not match the number of entries locally on the SRX Series device, as shown in the exhibit.
What is the correct action to solve this problem on the SRX device?

You must configure the DAE in a security policy on the SRX device.

Refresh the feed in ATP Cloud.

Force a manual download of the Proxy__Nodes feed.

Flush the DNS cache on the SRX device.

NEW QUESTION 37
Exhibit

The highlighted incident (arrow) shown in the exhibit shows a progression level of “Download” in the kill chain.
What are two appropriate mitigation actions for the selected incident? (Choose two.)

Immediate response required: Block malware IP addresses (download server or CnC server)

Immediate response required: Wipe infected endpoint hosts.

Immediate response required: Deploy IVP integration (if configured) to confirm if the endpoint has executed the malware and is infected.

Not an urgent action: Use IVP to confirm if machine is infected.

NEW QUESTION 38
You configured a chassis cluster for high availability on an SRX Series device and enrolled this HA cluster with the Juniper ATP Cloud. Which two statements are correct in this scenario? (Choose two.)

You must use different license keys on both cluster nodes.

When enrolling your devices, you only need to enroll one node.

You must set up your HA cluster after enrolling your devices with Juniper ATP Cloud

You must use the same license key on both cluster nodes.

NEW QUESTION 39
You are deploying a virtualization solution with the security devices in your network Each SRX Series device must support at least 100 virtualized instances and each virtualized instance must have its own discrete administrative domain.
In this scenario, which solution would you choose?

VRF instances

virtual router instances

logical systems

tenant systems

Loading …