Weekend Special - 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: spcl70

Note! JN0-635 has been withdrawn. The new exam code is JN0-636

JN0-635 Practice Exam Questions with Answers Security Professional (JNCIP-SEC) Certification

Question # 6

What are two important functions of the Juniper Networks ATP Appliance solution? (Choose two.)

A.

filtration

B.

detection

C.

statistics

D.

analytics

Full Access
Question # 7

You issue the command shown in the exhibit.

Which policy will be active for the identified traffic?

A.

Policy p4

B.

Policy p7

C.

Policy p1

D.

Policy p12

Full Access
Question # 8

Exhibit.

JN0-635 question answer

A hub member of an ADVPN is not functioning correctly.

Referring the exhibit, which action should you take to solve the problem?

A.

[edit interfaces]

root@vSRX-1# delete st0.0 multipoint

B.

[edit interfaces]

user@hub-1# delete ipsec vpn advpn-vpn traffic-selector

C.

[edit security]

user@hub-1# set ike gateway advpn-gateway advpn suggester disable

D.

[edit security]

user@hub-1# delete ike gateway advpn-gateway advpn partner

Full Access
Question # 9

Which two statements are true about ADVPN members? (Choose two.)

A.

ADVPN members are authenticated using pre-shared keys

B.

ADVPN members are authenticated using certificates

C.

ADVPN members can use IKEv2

D.

ADVPN members can use IKEv1

Full Access
Question # 10

Click the Exhibit button.

JN0-635 question answer

You have two hosts on the same subnet connecting to an SRX340 on interfaces ge-0/0/4 and ge-0/0/5. However, the two hosts cannot communicate with each other.

Referring to the exhibit, what are two actions that would solve this problem? (Choose two.)

A.

Set the SRX340 to Ethernet switching mode and reboot

B.

Add an IRB interface to the VLAN

C.

Put the ge-0/0/4 and ge-0/0/5 interfaces in different VLANs

D.

Remove the ge-0/0/4 and ge-0/0/5 interfaces from the L2 security zone

Full Access
Question # 11

Click the Exhibit button.

JN0-635 question answer

Referring to the exhibit, which statement is true?

A.

Source NAT with PAT is occurring

B.

Destination NAT is occurring

C.

Static NAT without PAT is occurring

D.

Source NAT without PAT is occurring

Full Access
Question # 12

Click the Exhibit button.

JN0-635 question answer

Referring to the exhibit, which IPS deployment mode is running on the SRX5800 device?

A.

sniffer mode

B.

integrated mode

C.

monitor mode

D.

in-line tap mode

Full Access
Question # 13

You must troubleshoot ongoing problems with IPsec tunnels and security policy processing. Your network consists of SRX340s and SRX5600s.

In this scenario, which two statements are true? (Choose two.)

A.

IPsec logs are written to the kmd log file by default

B.

IKE logs are written to the messages log file by default

C.

You must enable data plane logging on the SRX340 devices to generate security policy logs

D.

You must enable data plane logging on the SRX5600 devices to generate security policy logs

Full Access