JN0-635試験無料問題集（173題）「Juniper Security, Professional (JNCIP-SEC) 認定」

出題：1

You are asked to configure an SRX Series device to bypass all security features for IP traffic from the engineering department.
Which firewall filter will accomplish this task?

A.

B.

C.

D.

正解：C 解答を投票する

出題：2

Which feature of Sky ATP is deployed with Policy Enforcer?

A. service redundancy daemon configuration support

B. software image snapshot support

C. zero-day threat mitigation

D. device inventory management

正解：C 解答を投票する

出題：3

Which Junos security feature is used for signature-based attack prevention?

A. RADIUS

B. IPS

C. PIM

D. AppQoS

正解：B 解答を投票する

出題：4

Which three components are part of the AppSecure services suite? (Choose three.)

A. Sky ATP

B. AppFW

C. IDP

D. AppQoS

E. Web filtering

正解：B,C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

To which three UTM components would the custom-objects parameter apply? (Choose three.)

A. Sky ATP

B. antivirus

C. content filtering

D. antispam

E. Web filtering

正解：C,D,E 解答を投票する

出題：6

Which two statements are true about ADVPN members? (Choose two.)

A. ADVPN members are authenticated using pre-shared keys

B. ADVPN members are authenticated using certificates

C. ADVPN members can use IKEv1

D. ADVPN members can use IKEv2

正解：B,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

You are using IDP on your SRX Series device and are asked to ensure that the SRX Series device has the latest IDP database, as well as the latest application signature database.
In this scenario, which statement is true?

A. The IDP database includes the latest application signature database.

B. The application signature database cannot be updated on a device with the IDP database installed.

C. You must download the application signature database before installing the IDP database.

D. You must download each database separately.

正解：A 解答を投票する

出題：8

Click the Exhibit button.

Given the command output shown in the exhibit, which two statements are true? (Choose two.)

A. Network Address Translation is applied to this session

B. Traffic matching this session has been received since the session was established

C. The host 172.31.15.1 is directly connected to interface ge-0/0/3.0

D. The host 10.10.101.10 is directly connected to interface ge-0/0/4.0

正解：B,D 解答を投票する

出題：9

Click the Exhibit button.

You have enabled mixed mode on an SRX Series device.
You are unable to commit the configuration shown in the exhibit.
What is the problem in this scenario?

A. The trust zone cannot contain both Layer 2 and Layer 3 interfaces.

B. An IRB interface has not been configured.

C. STP is not enabled under the host-inbound-traffic system services hierarchy on the trust and protected security zones.

D. A Layer 3 interface has not been configured on VLAN v10.

正解：A 解答を投票する

出題：10

When would you use the port-overloading-factor 1 setting?

A. to set the maximum port-overloading capacity to 65,536

B. to disable the port-overloading

C. to enable the port-overloading

D. to map ports with 1:1 ratio for port-overloading

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

JN0-635試験無料問題集「Juniper Security, Professional (JNCIP-SEC) 認定」