Home / Juniper / JN0-636

Question list

List of questions

Question 1

(0)

Exhibit You are using trace options to verity NAT session information on your SRX Series device Referring to the exhibit, which two statements are correct? (Choose two.)

Question 2

(0)

Exhibit You are asked to establish an IBGP peering between the SRX Series device and the router, but the session is not being established. In the security flow trace on the SRX device, packet dro

Question 3

(0)

SRX Series device enrollment with Policy Enforcer fails To debug further, the user issues the following command show configuration services security—intelligence url https : //cloudfeeds . argon .

Question 4

(0)

Exhibit Referring to the exhibit, which three statements are true? (Choose three.)

Question 5

(0)

Exhibit You configure a traceoptions file called radius on your returns the output shown in the exhibit What is the source of the problem?

Question 6

(0)

Exhibit You have configured the SRX Series device to switch packets for multiple directly connected hosts that are within the same broadcast domain However, the traffic between two hosts in the s

Question 7

(0)

You are asked to deploy filter-based forwarding on your SRX Series device for incoming traffic sourced from the 10.10 100 0/24 network in this scenario, which three statements are correct? (Choose

Question 8

(0)

You are connecting two remote sites to your corporate headquarters site. You must ensure that all traffic is secured and sent directly between sites In this scenario, which VPN should be used?

Question 9

(0)

You are asked to detect domain generation algorithms Which two steps will accomplish this goal on an SRX Series firewall? (Choose two.)

Question 10

(0)

In Juniper ATP Cloud, what are two different actions available in a threat prevention policy to deal with an infected host? (Choose two.)

Question 91 - JN0-636 discussion

You want traffic to avoid the flow daemon for administrative task.

In this scenario which two stateless service are available with selective stateless packet based service. (Choose Two)

Layer 2 switching

IPv4 routing

IPsec

IPv6 routing

Suggested answer: A, B

Explanation:

You want traffic to avoid the flow daemon for administrative tasks. In this scenario, the two stateless services that are available with selective stateless packet-based services are:

A) Layer 2 switching. Layer 2 switching is a stateless service that forwards packets based on the MAC addresses of the source and destination hosts. Layer 2 switching does not require any routing or flow processing, and can be performed by the Packet Forwarding Engine (PFE) of the SRX Series device.

You can use selective stateless packet-based services to enable Layer 2 switching for traffic that matches a stateless firewall filter. The firewall filter must have the packet-mode action modifier to bypass the flow daemon1.

B) IPv4 routing. IPv4 routing is a stateless service that forwards packets based on the IP addresses of the source and destination hosts. IPv4 routing does not require any flow processing, and can be performed by the PFE of the SRX Series device. You can use selective stateless packet-based services to enable IPv4 routing for traffic that matches a stateless firewall filter. The firewall filter must have the packet-mode action modifier to bypass the flow daemon1.

The other options are incorrect because:

C) IPsec. IPsec is a stateful service that provides security and encryption for IP packets. IPsec requires flow processing, and cannot be performed by the PFE of the SRX Series device. You cannot use selective stateless packet-based services to enable IPsec for traffic that matches a stateless firewall filter. The firewall filter cannot have the packet-mode action modifier to bypass the flow daemon2.

D) IPv6 routing. IPv6 routing is a stateful service that forwards packets based on the IP addresses of the source and destination hosts. IPv6 routing requires flow processing, and cannot be performed by the PFE of the SRX Series device. You cannot use selective stateless packet-based services to enable

IPv6 routing for traffic that matches a stateless firewall filter. The firewall filter cannot have the packet-mode action modifier to bypass the flow daemon3.

Reference:

Selective Stateless Packet-Based Services Overview

IPsec VPN Overview

IPv6 Overview

Show Answer

asked 18/09/2024

shafinaaz hossenny

39 questions

Your answer: A B C D

0 comments

Sorted by