ExamGecko
Search Search Login
Home Home / Juniper / JN0-636
Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Refer to the Exhibit: which two statements about the configuration shown in the exhibit are correct ?
Exhibit You have configured the SRX Series device to switch packets for multiple directly connected hosts that are within the same broadcast domain However, the traffic between two hosts in the same broadcast domain are not matching any security policies Referring to the exhibit, what should you do to solve this problem?
Exhibit The exhibit shows a snippet of a security flow trace. In this scenario, which two statements are correct? (Choose two.)
Which two security intelligence feed types are supported?
Exhibit: You are troubleshooting a firewall filter shown in the exhibit that is intended to log all traffic and block only inbound telnet traffic on interface ge-0/0/3. How should you modify the configuration to fulfill the requirements?
Which two additional configuration actions are necessary for the third-party feed shown in the exhibit to work properly? (Choose two.)
Click the Exhibit button. Which type of NAT is shown in the exhibit?
What are two important function of the Juniper Networks ATP appliance solution? (Choose two.).
Exhibit You configure a traceoptions file called radius on your returns the output shown in the exhibit What is the source of the problem?
Exhibit Referring to the exhibit, which three statements are true? (Choose three.)

Question 1 - JN0-636 discussion

Report
Export

Exhibit

You are using trace options to verity NAT session information on your SRX Series device Referring to the exhibit, which two statements are correct? (Choose two.)

A.
This packet is part of an existing session.
Answers
A.
This packet is part of an existing session.
B.
The SRX device is changing the source address on this packet from
Answers
B.
The SRX device is changing the source address on this packet from
C.
This is the first packet in the session
Answers
C.
This is the first packet in the session
D.
The SRX device is changing the destination address on this packet 10.0.1 1 to 172 20.101.10.
Answers
D.
The SRX device is changing the destination address on this packet 10.0.1 1 to 172 20.101.10.
Suggested answer: A, D

Explanation:

According to the trace options output in the exhibit, the following statements are correct:

This packet is part of an existing session. This is indicated by the line flow session id 0x00000000, hash 0x00000000, table 0x00000000, flow process exit, which shows that the packet matches an existing session entry in the flow table1.

The SRX device is changing the destination address on this packet from 10.0.1.1 to 172.20.101.10. This is indicated by the line nat: translated 10.0.1.1->172.20.101.10, which shows that the packet undergoes destination NAT2.

The following statements are incorrect:

The SRX device is changing the source address on this packet. There is no indication of source NAT in the trace options output2.

This is the first packet in the session. The first packet in a session would have a different trace options output, which would include the line flow_first_inline_processing and show the creation of a new session entry in the flow table1.

Reference: 1: SRX Getting Started – Troubleshooting Traffic Flows and Session Establishment 2: SRX Getting Started - Configure NAT (Network Address Translation)

Show Answer
asked 18/09/2024
Maheshkumar Karuppaiah
34 questions
NextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms