You are not able to activate the SSH honeypot on the all-in-one Juniper ATP appliance.What would be a cause of this problem?

The collector must have a minimum of four interfaces.

The collector must have a minimum of two interfaces.

The collector must have a minimum of three interfaces.

The collector must have a minimum of five interfaces.

The collector must have a minimum of four interfaces.

You must implement an IPsec VPN on an SRX Series device using PKI certificates for authentication.As part of the implementation, you are required to ensure that the certificate submission, renewal, and retrieval processes are handled automatically from the certificate authority.In this scenario, which statement is correct.

You can use SCEP to accomplish this behavior.

You can use CRL to accomplish this behavior.

You can use SCEP to accomplish this behavior.

You can use OCSP to accomplish this behavior.

You can use SPKI to accomplish this behavior.

Exhibit. Referring to the exhibit, which two statements are true? (Choose two.)

Juniper Networks will not investigate false positives generated by this custom feed.

The custom infected hosts feed will overwrite the Sky ATP infected host's feed.

Juniper Networks will not investigate false positives generated by this custom feed.

The custom infected hosts feed will not overwrite the Sky ATP infected host's feed.

The custom infected hosts feed will overwrite the Sky ATP infected host's feed.

Juniper Networks will investigate false positives generated by this custom feed.

You are asked to configure a security policy on the SRX Series device. After committing the policy, you receive the "Policy is out of sync between RE and PFE <SPU-name(s)>." error.Which command would be used to solve the problem?

request security polices resync

Exhibit. Referring to the exhibit, a spoke member of an ADVPN is not functioning correctly.Which two commands will solve this problem? (Choose two.)

[edit security ike gateway advpn-gateway]user@srx# delete advpn partner

[edit security ike gateway advpn-gateway]user@srx# set advpn suggester disable

[edit interfaces]user@srx# delete st0.0 multipoint

[edit security ike gateway advpn-gateway]user@srx# delete advpn partner

[edit security ike gateway advpn-gateway]user@srx# set version v1-only

[edit security ike gateway advpn-gateway]user@srx# set advpn suggester disable

You are connecting two remote sites to your corporate headquarters site; you must ensure that all traffic is secured and only uses a single Phase 2 SA for both sites.In this scenario, which VPN should be used?

An IPsec group VPN with the corporate firewall acting as the hub device.

Full mesh IPsec VPNs with tunnels between all sites.

A hub-and-spoke IPsec VPN with the corporate firewall acting as the hub device.

A full mesh Layer 3 VPN with the corporate firewall acting as the hub device.

You have the NAT rule, shown in the exhibit, applied to allow communication across an IPsec tunnel between your two sites with identical networks. Which statement is correct in this scenario?

The NAT rule with translate the source and destination addresses.

The NAT rule will only translate two addresses at a time.

The NAT rule in applied to the N/A routing instance.

10 packets have been processed by the NAT rule.

You are asked to share threat intelligence from your environment with third party tools so that those tools can be identify and block lateral threat propagation from compromised hosts.Which two steps accomplish this goal? (Choose Two)

Enable Juniper ATP Cloud to share threat intelligence

Configure application tokens in the Juniper ATP Cloud to limit who has access

Configure application tokens in the SRX Series firewalls to limit who has access

Enable Juniper ATP Cloud to share threat intelligence

Configure application tokens in the Juniper ATP Cloud to limit who has access

Enable SRX Series firewalls to share Threat intelligence with third party tool.

you are connecting two remote sites to your corporate headquarters site. You must ensure that traffic passes corporate headquarter.

a Layer 3 VPN with the corporate firewall acting as the hub device

In this scenario, which VPN should be used?

full mesh IPsec VPNs with tunnels between all sites

a full mesh Layer 3 VPN with the BGP route reflector behind the corporate firewall device

a Layer 3 VPN with the corporate firewall acting as the hub device

hub-and-spoke IPsec VPN with the corporate firewall acting as the hub device

A company wants to par on their physical SRX series firewall into multiple logical units and assign each unit (tenant) to a department within the organization. You are the primary administrator of firewall and a colleague is the administrator for one of the departments.Which two statements are correct about your colleague? (Choose two)

The colleague can access and view the resources of the tenant system.

The colleague can create and assign logical interfaces to the tenant system

The colleague can configure the resources allocated and routing protocols

The colleague can access and view the resources of the tenant system.

The colleague can create and assign logical interfaces to the tenant system

The colleague can modify the number of allocated resources for the tenant system

Exhibit: You are troubleshooting a firewall filter shown in the exhibit that is intended to log all traffic and block only inbound telnet traffic on interface ge-0/0/3.How should you modify the configuration to fulfill the requirements?

Modify the log-all term to add the next term action

Add a term before the log-all term that blocks Telnet

Apply a firewall filter to the loopback interface that blocks Telnet traffic

you configured a security policy permitting traffic from the trust zone to the untrust zone but your traffic not hitting the policy.In this scenario, which cli command allows you to troubleshoot traffic problem using the match criteria?

show security application-tracking counters

request security policies check

Refer to the exhibit, which two potential violations will generate alarm ? (Choose Two)

the number of policy violations by a source network identifier

the number of policy violation to an application within a specified period

the number of policy violations by a source network identifier

the ratio of policy violation traffic compared to accepted traffic.

the number of policy violation by a destination TCP port

the number of policy violation to an application within a specified period

Exhibit: Referring to the exhibit, the operator user is unable to save configuration files to a usb stick the is plugged into SRX. What should you do to solve this problem?

Add the system-control permission flag to the operation class

Add the floppy permission flag to the operations class

Add the system-control permission flag to the operation class

Add the interface-control permission flag to the operation class

Add the system permission flag to the operation class

you must create a secure fabric in your company's networkIn this Scenario, Which three statements are correct? (Choose Three)

A switch must be assigned to the site to enforce an infected host policy within the network

SRX Series devices can belong to only one site

Switches and connectors cannot be added to the same site

MX Series device associated with tenants can belong to only one site

A switch must be assigned to the site to enforce an infected host policy within the network

SRX Series devices can belong to multiple sites

SRX Series devices can belong to only one site

Switches and connectors cannot be added to the same site

Exhibit: Referring to the exhibit, your company's infrastructure team implemented new printers To make sure that the policy enforcer pushes the updated Ip address list to the SRX.Which three actions are required to complete the requirement? (Choose three )

Configure the server feed URL as http://172.25.10.254/myprinters

Create a security policy that uses the dynamic address feed to allow access

Configure Security Director to create a dynamic address feed

Configure the server feed URL as http://172.25.10.254/myprinters

Create a security policy that uses the dynamic address feed to allow access

Configure Security Director to create a dynamic address feed

Configure Security Director to create a C&C feed.

Configure server feed URL as https://172.25.10.254/myprinters.

Refer to the Exhibit: which two statements about the configuration shown in the exhibit are correct ?

The remote IKE gateway IP address is 203.0.113.100.

The remote peer is assigned a dynamic IP address.

The remote IKE gateway IP address is 203.0.113.100.

The local peer is assigned a dynamic IP address.

The local IKE gateway IP address is 203.0.113.100.

The remote peer is assigned a dynamic IP address.

You are asked to control access to network resources based on the identity of an authenticated device Which three steps will accomplish this goal on the SRX Series firewalls? (Choose three )

Configure an end-user-profile that characterizes a device or set of devices

Reference the end-user-profile in the security policy.

Configure the authentication source to be used to authenticate the device

Configure an end-user-profile that characterizes a device or set of devices

Reference the end-user-profile in the security zone

Reference the end-user-profile in the security policy.

Apply the end-user-profile at the interface connecting the devices

Configure the authentication source to be used to authenticate the device

Exhibit. Referring to the exhibit, which two statements are true? (Choose two.)

The c-1 TSYS cannot use any security flow resources.

The c-1 TSYS has no reservation for the security flow resource.

The c-1 TSYS has a reservation for the security flow resource.

The c-1 TSYS can use security flow resources up to the system maximum.

The c-1 TSYS cannot use any security flow resources.

The c-1 TSYS has no reservation for the security flow resource.

You are asked to look at a configuration that is designed to take all traffic with a specific source ip address and forward the traffic to a traffic analysis server for further evaluation. The configuration is no longer working as intended.Referring to the exhibit which change must be made to correct the configuration?

Apply the filter as in input filter on interface xe-0/0/1.0

Apply the filter as in input filter on interface xe-0/2/1.0

Apply the filter as in input filter on interface xe-0/0/1.0

Create a routing instance named default

Apply the filter as in output filter on interface xe-0/1/0.0

Exhibit: The security trace options configuration shown in the exhibit is committed to your SRX series firewall.Which two statements are correct in this Scenario? (Choose Two)

Once the trace has generated 10 log files, older logs will be overwritten.

The file debugger will be readable only by the user who committed this configuration

The file debugger will be readable by all users.

Once the trace has generated 10 log files, older logs will be overwritten.

Once the trace has generated 10 log files, the trace process will halt.

The file debugger will be readable only by the user who committed this configuration

Exhibit: Referring to the exhibit, which two statements are correct?

All of the entries are command and control entries.

All of the entries are Dshield entries

All of the entries are a threat level 8

All of the entries are command and control entries.

All of the entries are Dshield entries

All of the entries are a threat level 10.

Juniper JN0-636 Practice Test 3 - Free Online Exam Prep & Questions

You have a webserver and a DNS server residing in the same internal DMZ subnet. The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface. You implement DNS doctoring to ensure remote users can access the webserver.Which two statements are true in this scenario?

(Choose two.)

Become a Premium Member for full access

Unlock Premium Member

Juniper JN0-636 Practice Test 3

Question

Juniper JN0-636 Practice Tests

Practice Tests