JN0-635試験無料問題集（173題）「Juniper Security, Professional (JNCIP-SEC) 認定」

出題：1

Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high available chassis cluster and are configured for IPS. There has been a node failover.
In this scenario, which two statements are true? (Choose two.)

A. Cached SSL session ID information for existing sessions is not synchronized between nodes.

B. The IP action table is not synchronized between the chassis cluster nodes.

C. Cached SSL session ID information for existing session is synchronized between nodes.

D. The IP action table is synchronized between the chassis cluster nodes.

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

What is a function of UTM?

A. IPsec

B. bridge mode

C. AppFW

D. content filtering

正解：D 解答を投票する

出題：3

Which two statements about AppQoS are true? (Choose two.)

A. AppQoS supports rate limiting.

B. AppQoS supports forwarding class assignment.

C. AppQoS supports bandwidth reservation.

D. AppQoS remarking supersedes interface remarking.

正解：A,B 解答を投票する

出題：4

Which configurable SRX Series device feature allows you to capture transit traffic?

A. syslog

B. archival

C. traceoptions

D. packet-capture

正解：C 解答を投票する

出題：5

You are asked to secure your network against TOR network traffic.
Which two Juniper products would accomplish this task? (Choose two.)

A. Juniper Sky ATP

B. Contrail Edge

C. Juniper ATP Appliance

D. Contrail Insights

正解：A,C 解答を投票する

出題：6

Using content filtering on an SRX Series device, which three types of HTTP content are able to be blocked? (Choose three.)

A. Flash

B. Active X

C. Java applets

D. PDF files

E. ZIP files

正解：B,C,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

While reviewing the Log and Reporting portion of Security Director, you find that multiple objects reference the same address. You want to use a standardized name for all of the objects.
In this scenario, how would you create a standardized object name without searching the entire policy?

A. Remove the duplicate objects.

B. Rename the duplicate objects.

C. Replace the duplicate objects.

D. Merge the duplicate objects.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

To which three UTM components would the custom-objects parameter apply? (Choose three.)

A. Sky ATP

B. antivirus

C. content filtering

D. antispam

E. Web filtering

正解：C,D,E 解答を投票する

出題：9

SRX Series devices with AppSecure support which three custom signatures? (Choose three.)

A. latency detection mapping

B. IP protocol-based mapping

C. Layer 7-based signatures

D. MAC address-based mapping

E. ICMP-based mapping

正解：B,C,E 解答を投票する

出題：10

You are connecting two remote sites to your corporate headquarters site, you must ensure that all traffic is secured and only uses a single Phase 2 SA for both sites.
In this scenario, which VPN should be used?

A. An IPsec group VPN with the corporate firewall acting as the hub device.

B. Full mesh IPsec VPNs with tunnels between all sites.

C. A full mesh Layer 3 VPN with the corporate firewall acting as the hub device.

D. A hub-and-spoke IPsec VPN with the corporate firewall acting as the hub device.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

Click the Exhibit button.

Two hosts on the same subnet are connected to an SRX340 using interfaces ge-0/0/4 and ge-
0/0/5. The two hosts can communicate with each other, but they cannot communicate with hosts outside of their subnet.
Referring to the exhibit, which three actions would you take to solve this problem? (Choose three.)

A. Reboot the SRX340.

B. Add the ge-0/0/4 and ge-0/0/5 interfaces to the L2 zone.

C. Configure a security policy to permit the traffic.

D. Set the SRX340 to Ethernet switching mode.

E. Remove the irb.0 interface from the L2 zone.

正解：A,C,D 解答を投票する

JN0-635試験無料問題集「Juniper Security, Professional (JNCIP-SEC) 認定」