JN0-636試験無料問題集（117題）「Juniper Security, Professional (JNCIP-SEC) 認定」

出題：1

Exhibit

Referring to the exhibit, an internal host is sending traffic to an Internet host using the 203.0.113.1 reflexive address with source port 54311.
Which statement is correct in this situation?

A. Any host on the Internet can initiate traffic to reach the internal host using the 203.0.113.1 address, source port 54311, and a random destination port.

B. Any host on the Internet can initiate traffic to reach the internal host using the 203.0.113.1 address, a random source port, and destination port 54311.

C. Only the Internet host that the internal host originally communicated with can initiate traffic to reach the internal host using the 203.0.113.1 address, source port 54311, and a random destination port.

D. Only the Internet host that the internal host originally communicated with can initiate traffic to reach the internal host using the 203.0 113.1 address, a random source port, and destination port 54311.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

You are asked to download and install the IPS signature database to a device operating in chassis cluster mode. Which statement is correct in this scenario?

A. The first time you synchronize the IPS signature package from the primary node to the backup node, the primary node must be rebooted.

B. You must download and install the IPS signature package on the primary node.

C. The IPS signature package must be downloaded and installed on the primary and backup nodes.

D. The first synchronization of the backup node and the primary node must be performed manually.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

You have a webserver and a DNS server residing in the same internal DMZ subnet. The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface. You implement DNS doctoring to ensure remote users can access the webserver.Which two statements are true in this scenario? (Choose two.)

A. The Proxy ARP feature must be configured.

B. The DNS doctoring ALG is not enabled by default.

C. The DNS CNAME record is translated.

D. The DNS doctoring ALG is enabled by default.

正解：A,D 解答を投票する

出題：4

Click the Exhibit button.

Which type of NAT is shown in the exhibit?

A. persistent NAT

B. NAT46

C. NAT64

D. DS-Lite

正解：C 解答を投票する

出題：5

Exhibit
<e ip="img_34.jpg"></e> A. The highlighted incident (arrow) shown in the exhibit shows a progression level of "Download" in the kill chain.
What are two appropriate mitigation actions for the selected incident? (Choose two.)

A. Immediate response required: Block malware IP addresses (download server or CnC server)

B. Immediate response required: Deploy IVP integration (if configured) to confirm if the endpoint has executed the malware and is infected.

C. Immediate response required: Wipe infected endpoint hosts.

D. Not an urgent action: Use IVP to confirm if machine is infected.

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Exhibit:

Referring to the exhibit, the operator user is unable to save configuration files to a usb stick the is plugged into SRX. What should you do to solve this problem?

A. Add the system-control permission flag to the operation class

B. Add the floppy permission flag to the operations class

C. Add the interface-control permission flag to the operation class

D. Add the system permission flag to the operation class

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Exhibit

The show network-access aaa radius-servers command has been issued to solve authentication issues.
Referring to the exhibit, to which two authentication servers will the SRX Series device continue to send requests? (Choose TWO)

A. 200l:DB8:0:f101;:2

B. 192.168.30.191

C. 192.168.30.188

D. 192.168.30.190

正解：B,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Exhibit

You are implementing filter-based forwarding to send traffic from the 172.25.0.0/24 network through ISP-1 while sending all other traffic through your connection to ISP-2. Your ge-0/0/1 interface connects to two networks, including the 172.25.0.0/24 network. You have implemented the configuration shown in the exhibit. The traffic from the 172.25.0.0/24 network is being forwarded as expected to 172.20.0.2, however traffic from the other network (172.25.1.0/24) is not being forwarded to the upstream 172.21.0.2 neighbor.
In this scenario, which action will solve this problem?

A. You must add another term to the firewall filter to accept the traffic from the 172.25.1.0/24 network.

B. You must specify that the 172.25.1.1/24 IP address is the primary address on the ge-0/0/1 interface.

C. You must apply the firewall filter to the lo0 interface when using filter-based forwarding.

D. You must create the static default route to neighbor 172.21 0.2 under the ISP-1 routing instance hierarchy.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Exhibit

Referring to the exhibit, which type of NAT is being performed?

A. Destination NAT

B. Static NAT

C. Source NAT

D. Persistent NAT

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

JN0-636試験無料問題集「Juniper Security, Professional (JNCIP-SEC) 認定」