JN0-635試験無料問題集（173題）「Juniper Security, Professional (JNCIP-SEC) 認定」

出題：1

To which three UTM components would the custom-objects parameter apply? (Choose three.)

出題：2

Your manager asks you to show which attacks have been detected on your SRX Series device using the IPS feature.
Which command would you use to accomplish this task?

A. show security idp counters

B. show security idp attack table

C. show security idp memory

D. show security idp attack detail

正解：B 解答を投票する

出題：3

What are two important functions of the Juniper Networks ATP Appliance solution? (Choose two.)

A. detection

B. filtration

C. statistics

D. analytics

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which statement about transparent mode on an SRX340 is true?

A. All interfaces on the device must be configured with the ethernet-switching protocol family.

B. Screens are not supported in transparent mode security zones.

C. Security policies applied to transparent mode zones require Layer 2 address matching.

D. You must reboot the device after configuring transparent mode.

正解：D 解答を投票する

出題：5

Click the Exhibit button.

You deployed a site-to-site IPsec VPN connecting two data centers together using SRX5800s.
After examining the performance of the IPsec VPN, you decide to enable IPsec performance acceleration to increase the rate of traffic that can be sent through the tunnel.
Referring to the exhibit, which two statements should you add to the configuration to accomplish this task? (Choose two.)

A. [edit security flow]
user@srx# set ipsec-performance-acceleration

B. [edit security flow]
user@srx# set load-distribution session-affinity ipsec

C. [edit security flow]
user@srx# set tcp-mss ipsec-vpn mss 65535

D. [edit security flow]
user@srx# set power-mode-ipsec

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

You have the NAT rule, shown in the exhibit, applied to allow communication across an IPsec tunnel between your two sites with identical networks. Which statement is correct in this scenario?

A. The NAT rule will only translate two addresses at a time.

B. The NAT rule in applied to the N/A routing instance.

C. The NAT rule with translate the source and destination addresses.

D. 10 packets have been processed by the NAT rule.

正解：C 解答を投票する

出題：7

Referring to the exhibit, which two statements are true? (Choose two.)

A. The custom infected hosts feed will not overwrite the Sky ATP infected host's feed.

B. The custom infected hosts feed will overwrite the Sky ATP infected host's feed.

C. Juniper Networks will not investigate false positives generated by this custom feed.

D. Juniper Networks will investigate false positives generated by this custom feed.

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

You are asked to implement the AppFW feature on an SRX Series device.
Which three tasks must be performed to make the feature work? (Choose three.)

A. Configure a firewall filter that includes the application-firewall policy.

B. Configure an application-firewall policy.

C. Install an IPS license.

D. Install an AppSecure license.

E. Configure a security policy that includes the application-firewall policy.

正解：B,D,E 解答を投票する

出題：9

Click the Exhibit button.

Two hosts on the same subnet are connected to an SRX340 using interfaces ge-0/0/4 and ge-
0/0/5. The two hosts can communicate with each other, but they cannot communicate with hosts outside of their subnet.
Referring to the exhibit, which three actions would you take to solve this problem? (Choose three.)

A. Reboot the SRX340.

B. Add the ge-0/0/4 and ge-0/0/5 interfaces to the L2 zone.

C. Configure a security policy to permit the traffic.

D. Set the SRX340 to Ethernet switching mode.

E. Remove the irb.0 interface from the L2 zone.

正解：A,C,D 解答を投票する

出題：10

Click the Exhibit button.

Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)

正解：A,B,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

JN0-635試験無料問題集「Juniper Security, Professional (JNCIP-SEC) 認定」