JN0-635試験無料問題集（173題）「Juniper Security, Professional (JNCIP-SEC) 認定」

出題：1

Which feature of Sky ATP is deployed with Software-Defined Secure Networks?

A. service redundancy daemon configuration support

B. software image snapshot support

C. zero-day threat mitigation

D. device inventory management

正解：C 解答を投票する

出題：2

Referring to the exhibit, which two statements are true? (Choose two.)

A. The custom infected hosts feed will not overwrite the Sky ATP infected host's feed.

B. The custom infected hosts feed will overwrite the Sky ATP infected host's feed.

C. Juniper Networks will not investigate false positives generated by this custom feed.

D. Juniper Networks will investigate false positives generated by this custom feed.

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

You must ensure that your Layer 2 traffic is secured on your SRX Series device in transparent mode.
What must be considered when accomplishing this task?

A. Screens are not supported in your security zones with transparent mode.

B. Security policies are not supported when operating in transparent mode.

C. You must reboot your device after configuring transparent mode.

D. Layer 2 interfaces must use theethernet-switchingprotocol family.

正解：C 解答を投票する

出題：4

As an SRX administrator, you must find all encrypted sessions on an SRX Series device.
Which command would you use to accomplish this task?

A. show security flow session encrypted

B. show security flow session tunnel

C. show security ike tunnel-map

D. show security ike security-associations

正解：A 解答を投票する

出題：5

Which two statements about enabling MACsec using static CAK security mode keys are true?
(Choose two.)

A. CAK secures the control plane traffic.

B. CAK secures the data plane traffic.

C. SAK secures the data plane traffic.

D. SAK secures the control plane traffic.

正解：A,C 解答を投票する

出題：6

Which two parameters are required to match in an IDP rule for the terminal option to take effect?
(Choose two.)

A. source-address

B. attacks custom-attacks

C. attacks predefined-attacks

D. application

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Click the Exhibit button.

When attempting to enroll an SRX Series device to JATP, you receive the error shown in the exhibit.
What is the cause of the error?

A. The SRX Series device does not have an IP address assigned to the interface that accesses JATP

B. The SRX Series device certificate does not match the JATP certificate

C. The fxp0 IP address is not routable

D. A firewall is blocking HTTPS on fxp0

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Your manager has notices a drop in productivity and believes it is due to employees checking their social media feeds too frequently. You are asked to provide analytical statistics for this traffic within your network on an hourly basis.
Which AppSecure feature should be used to collect this information?

A. AppTrack

B. AppFW

C. APBR

D. AppQoS

正解：A 解答を投票する

出題：9

Malware that is detonated by the JATP sandbox must be able to communicate with the Internet without being able to harm your local network resources.
Which statement is correct in this scenario?

A. The monitoring interface must be connected to the Internet zone

B. The honeypot interface must be connected to the Internet zone

C. The exhaust interface must be connected to the Internet zone

D. The management interface must be connected to the Internet zone

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

You have a remote access VPN where the remote users are using the NCP client. The remote users can access the internal corporate resources as intended; however, traffic that is destined to all other Internet sites is going through the remote access VPN. You want to ensure that only traffic that is destined to the internal corporate resources use the remote access VPN.
Which two actions should you take to accomplish this task? (Choose two.)

A. Configure split tunneling on the NCP profile on the remote client

B. Enable the split tunneling feature within the VPN configuration on the SRX Series device

C. Configure the necessary traffic selectors within the VPN configuration on the SRX Series device

D. Enable IKEv2 within the VPN configuration on the SRX Series device

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

JN0-635試験無料問題集「Juniper Security, Professional (JNCIP-SEC) 認定」