最新的Junos Security認證 JN0-635考試題庫

問題1

Which two log format types are supported by the JATP appliance? (Choose two.)

A. YAML

B. CSV

C. YANG

D. XML

正確答案: B,D

說明：（僅 VCESoft 成員可見）

問題2

You want to review AppTrack statistics to determine the characteristics of the traffic being monitored.
Which operational mode command would accomplish this task on an SRX Series device?

A. show services application-identification application detail

B. show services application-identification statistics applications

C. show security application-tracking counters

D. show services security-intelligence statistics

正確答案: B

問題3

Referring to the configuration shown in the exhibit, which statement explains why traffic matching the IDP signature DNS:OVERFLOW:TOO-LONG-TCP-MSG is not being stopped by the SRX Series device?

A. The security policy dmz-pol1 has an action of permit.

B. The IDP rule r2 has an ip-action value of notify.

C. The IDP rule r1 has an action of ignore-connection.

D. The IDP policy idp-pol1 is not configured as active.

正確答案: D

問題4

You must ensure that your Layer 2 traffic is secured on your SRX Series device in transparent mode.
What must be considered when accomplishing this task?

A. Security policies are not supported when operating in transparent mode.

B. You must reboot your device after configuring transparent mode.

C. Screens are not supported in your security zones with transparent mode.

D. Layer 2 interfaces must use theethernet-switchingprotocol family.

正確答案: B

問題5

Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high availability chassis cluster and are expected to support several UTM features.
Which two statements related to this environment are true? (Choose two.)

A. UTM features can be configured on either of the nodes within the cluster.

B. UTM features must be configured on the primary node within the cluster.

C. The chassis cluster must be configured for active/backup mode.

D. The chassis cluster must be configured for active/active mode.

正確答案: A,C

問題6

Click the Exhibit button.

You have configured integrated user firewall on the SRX Series devices in your network.
However, you noticed that no users can access the servers that are behind the SRX Series devices.
Referring to the exhibit, what is the problem?

A. The Kerberos service is not configured correctly on the Active Directory server.

B. The security policy on the SRX Series device is configured incorrectly.

C. The SAML service is not configured correctly on the Active Directory server.

D. There are no authentication entries in the SRX Series device for the users.

正確答案: D

問題7

You are asked to implement a Dynamic IPsec VPN on your new SRX240. You are required to facilitate up to 5 simultaneous users.
Which two statements must be considered when accomplishing the task?

A. You must acquire at least three additional licenses.

B. You must be a policy-based VPN.

C. Your devices must be in a chassis cluster.

D. You must use main mode for your IKE phase 1 policy.

正確答案: A,B

問題8

Click the Exhibit button.

Which statement explains the current state value of the command output shown in the exhibit?

A. A valid response was received from a domain PC probe, and the user is a valid domain user programmed in the PFE.

B. The user-to-address mapping was successfully read from the domain controller event logs, and an entry was added to the authentication table witch currently resides on the Routing Engine.

C. An invalid response was received from a domain PC probe, and the user is an invalid domain user.

D. A probe event generated an entry in the authentication table, but no probe response has been received from the domain PC.

正確答案: B

說明：（僅 VCESoft 成員可見）

最新的Juniper Security, Professional (JNCIP-SEC) - JN0-635免費考試真題

最新更新

站內鏈接

聯系我們