Security, Professional (JNCIP-SEC) (JN0-636) Free Practice Test

Question 1

Exhibit

You are using ATP Cloud and notice that there is a host with a high number of ETI and C&C hits sourced from the same investigation and notice that some of the events have not been automatically mitigated.
Referring to the exhibit, what is a reason for this behavior?

A. The C&C events are false positives.

B. The infected host score is globally set bellow a threat level of 5.

C. The ETI events are false positives.

D. The infected host score is globally set above a threat level of 5.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

You are connecting two remote sites to your corporate headquarters site. You must ensure that all traffic is secured and sent directly between sites In this scenario, which VPN should be used?

A. IPsec ADVPN

B. full mesh Layer 3 VPN with EBGP

C. Layer 2 VPN

D. hub-and-spoke IPsec VPN

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Exhibit:
Referring to the exhibit, your company's infrastructure team implemented new printers To make sure that the policy enforcer pushes the updated Ip address list to the SRX.
Which three actions are required to complete the requirement? (Choose three )

A. Configure the server feed URL as http://172.25.10.254/myprinters

B. Configure server feed URL as https://172.25.10.254/myprinters.

C. Configure Security Director to create a dynamic address feed

D. Configure Security Director to create a C&C feed.

E. Create a security policy that uses the dynamic address feed to allow access

Correct Answer: A,C,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

You are required to deploy a security policy on an SRX Series device that blocks all known Tor network IP addresses. Which two steps will fulfill this requirement? (Choose two.)

A. Enroll the devices with Juniper ATP Cloud.

B. Create a custom feed containing all current known MAC addresses.

C. Enable a third-party Tor feed.

D. Enroll the devices with Juniper ATP Appliance.

Correct Answer: A,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which two types of source NAT translations are supported in this scenario? (Choose two.)

A. translation of one IPv6 subnet to another IPv6 subnet with port address translation

B. translation of one IPv6 subnet to another IPv6 subnet without port address translation

C. translation of one IPv4 subnet to one IPv6 subnet with port address translation

D. translation of IPv4 hosts to IPv6 hosts with or without port address translation

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

you configured a security policy permitting traffic from the trust zone to the untrust zone but your traffic not hitting the policy.
In this scenario, which cli command allows you to troubleshoot traffic problem using the match criteria?

A. show security policy-report

B. show security match-policies

C. request security policies check

D. show security application-tracking counters

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Juniper Security, Professional (JNCIP-SEC) (JN0-636) Free Practice Test