Security, Professional (JNCIP-SEC) (JN0-635) Free Practice Test

Question 1

Referring to the exhibit, which two statements are true? (Choose two.)

A. The configured solution allows IPv4 to IPv6 translation.

B. The configured solution allows IPv6 to IPv4 translation.

C. The IPv6 address is invalid.

D. External hosts cannot initiate contact.

Correct Answer: B,C

Question 2

Click the Exhibit button.

Your organization requests that you direct Facebook traffic out a different link to ensure that the bandwidth for critical applications is protected.
Referring to the exhibit, which forwarding instance will be used on your SRX Series device?

A. R2

B. inet.0

C. R3

D. R1

Correct Answer: A

Question 3

You are asked to set up notifications if one of your collector traffic feeds drops below 100 kbps.
Which two configuration parameters must be set to accomplish this task? (Choose two.)

A. Set a logging notification on the JATP appliance

B. Set a traffic system alert on the JATP appliance

C. Set a traffic SNMP trap on the JATP appliance

D. Set a general triggered notification on the JATP appliance

Correct Answer: A,B

Question 4

Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high availability chassis cluster and are configured for IPS. There has been a node failover.
In this scenario, which statement is true?

A. Existing sessions continue to be processed by IPS because of table synchronization.

B. Existing sessions are no longer processed by IPS and become firewall sessions.

C. Existing sessions are dropped and must be reestablished so IPS processing can occur.

D. Existing session continue to be processed by IPS as long as GRES is configured.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Click the Exhibit button.

You have enabled mixed mode on an SRX Series device.
You are unable to commit the configuration shown in the exhibit.
What is the problem in this scenario?

A. An IRB interface has not been configured.

B. A Layer 3 interface has not been configured on VLAN v10.

C. The trust zone cannot contain both Layer 2 and Layer 3 interfaces.

D. STP is not enabled under the host-inbound-traffic system services hierarchy on the trust and protected security zones.

Correct Answer: C

Question 6

You have a webserver and a DNS server residing in the same internal DMZ subnet.
The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface.
You implement DNS doctoring to ensure remote users can access the webserver.
Which two statements are true in this scenario? (Choose two.)

A. The DNS CNAME record is translated.

B. The DNS doctoring ALG is not enabled by default.

C. The Proxy ARP feature must be configured.

D. The DNS doctoring ALG is enabled by default.

Correct Answer: C,D

Question 7

Referring to the exhibit, you have configured a Sky ATP policy to inspect user traffic. However, you have noticed that encrypted traffic is not being inspected.
In this scenario, what must you do to solve this issue?

A. Configure the PKI feature.

B. Configure the SSL forward proxy feature.

C. Change the policy to inspect TLS traffic.

D. Change the policy to inspect HTTPS traffic.

Correct Answer: B

Question 8

What is the correct application mapping sequence when a user goes to Facebook for the first time through an SRX Series device?

A. first packet > check application system cache > classify application > process packet > match and identify application

B. first packet > check application system cache > process packet > classify application > match and identify application

C. first packet > process packet > check application system cache > classify application > match and identify application

D. first packet > process packet > check application system cache > classify application > process packet > match and identify application

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

When would you use the port-overloading-factor 1 setting?

A. to set the maximum port-overloading capacity to 65,536

B. to map ports with 1:1 ratio for port-overloading

C. to disable the port-overloading

D. to enable the port-overloading

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

Click the Exhibit button.

Referring to the exhibit, which statement is true?

A. E-mails from the [email protected] address are blocked by the spam list server.

B. E-mails from the [email protected] address are blocked by the reject blacklist.

C. E-mails from the [email protected] address are marked with SPAM in the subject line by the spam block list server.

D. E-mails from the [email protected] address are allowed by the allow whitelist.

Correct Answer: D

Question 11

Click the Exhibit button.

Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)

A. Topology 4

B. Topology 5

C. Topology 3

D. Topology 2

E. Topology 1

Correct Answer: A,C,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

Which two statements about the integrated user firewall feature of the Junos OS are true?
(Choose two.)

A. IPv6 addresses are supported.

B. The maximum number of supported active directory servers is ten.

C. IPv6 addresses are not supported.

D. The maximum number of supported active directory servers is five.

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Juniper Security, Professional (JNCIP-SEC) (JN0-635) Free Practice Test