IT Certification Exam Questions & Answers

NEW QUESTION 56
Click the Exhibit button.

You have two hosts on the same subnet connecting to an SRX340 on interfaces ge-0/0/4 and ge-0/0/5.
However, the two hosts cannot communicate with each other.
Referring to the exhibit, what are two actions that would solve this problem? (Choose two.)

NEW QUESTION 57
Click the Exhibit button.

You have configured an ADVPN that is operational. However, OSPF will not establish correctly across the ADVPN tunnels.
Referring to the exhibit, which two commands will solve the problem? (Choose two.)

NEW QUESTION 58
You configured a security policy permitting traffic from the trust zone to the DMZ zone, inserted the new policy at the top of the list, and successfully committed it to the SRX Series device. Upon monitoring, you notice that the hit count does not increase on the newly configured policy.
In this scenario, which two commands would help you to identify the problem? (Choose two.)

NEW QUESTION 59
You are not able to activate the SSH honeypot on the all-in-one Juniper ATP appliance.
What would be a cause of this problem?

NEW QUESTION 60
Click the Exhibit button.

You have configured an ADVPN that is operational. However, OSPF will not establish correctly across the ADVPN tunnels.
Referring to the exhibit, which two commands will solve the problem? (Choose two.)

NEW QUESTION 61
Click the Exhibit button.

When attempting to enroll an SRX Series device to JATP, you receive the error shown in the exhibit. What is the cause of the error?

NEW QUESTION 62
Click the Exhibit button.

Your company has purchased a competitor and now must connect the new network to the existing one. The competitor’s gateway device is receiving its ISP address using DHCP. Communication between the two sites must be secured; however, obtaining a static public IP address for the new site gateway is not an option at this time. The company has several requirements for this solution:
* A site-to-site IPsec VPN must be used to secure traffic between the two sites;
* The IKE identity on the new site gateway device must use the hostname option; and
* Internet traffic from each site should exit through its local Internet connection.
The configuration shown in the exhibit has been applied to the new site’s SRX, but the secure tunnel is not working.
In this scenario, what configuration change is needed for the tunnel to come up?

NEW QUESTION 63
Click the Exhibit button.

The exhibit shows a snippet of a security flow trace. A user cannot open an SSH session to a server. Which action will solve the problem?

NEW QUESTION 64
Click the Exhibit button.

Your company has purchased a competitor and now must connect the new network to the existing one. The competitor’s gateway device is receiving its ISP address using DHCP.
Communication between the two sites must be secured; however, obtaining a static public IP address for the new site gateway is not an option at this time. The company has several requirements for this solution:
– A site-to-site IPsec VPN must be used to secure traffic between the
two sites;
– The IKE identity on the new site gateway device must use the hostname option; and
– Internet traffic from each site should exit through its local
Internet connection.
The configuration shown in the exhibit has been applied to the new site’s SRX, but the secure tunnel is not working.
In this scenario, what configuration change is needed for the tunnel to come up?

NEW QUESTION 65
Click the Exhibit button.

Referring to the exhibit, which three types of traffic would be examined by the IPS policy between Switch-1 and Switch-2? (Choose three.)

NEW QUESTION 66
Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

NEW QUESTION 67
You have initiated the download of the IPS signature database on your SRX Series device.
Which command would you use to confirm the download has completed?

NEW QUESTION 68
Click the Exhibit button.

A user is trying to reach a company’s website, but the connection errors out. The security policies are configured correctly.
Referring to the exhibit, what is the problem?

NEW QUESTION 69
Click the Exhibit button.

You deployed a site-to-site IPsec VPN connecting two data centers together using SRX5800s. After examining the performance of the IPsec VPN, you decide to enable IPsec performance acceleration to increase the rate of traffic that can be sent through the tunnel.
Referring to the exhibit, which two statements should you add to the configuration to accomplish this task?
(Choose two.)
[edit security flow]

NEW QUESTION 70
Click the Exhibit button.

Branch 1 and Branch 2 have an active VPN tunnel configured, but internal hosts cannot communicate with each other.
Referring to the exhibit, which type of configuration should be applied to solve the problem?

NEW QUESTION 71
Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

NEW QUESTION 72
When would you use the port-overloading-factor 1 setting?

NEW QUESTION 73
You are asked to configure a new SRX Series CPE device at a remote office. The device must participate in forwarding MPLS and IPsec traffic.
Which two statements are true regarding this implementation? (Choose two.)

NEW QUESTION 74
Click the Exhibit button.

Referring to the exhibit, which three types of traffic would be examined by the IPS policy between Switch-1 and Switch-2? (Choose three.)