Security, Professional (JNCIP-SEC) (JN0-637) Free Practice Test

Question 1

You are asked to create multiple virtual routers using a single SRX Series device. You must ensure that each virtual router maintains a unique copy of the routing protocol daemon (RPD) process.
Which solution will accomplish this task?

A. Logical system

B. Secure wire

C. Transparent mode

D. Tenant system

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which two additional configuration actions are necessary for the third-party feed shown in the exhibit to work properly? (Choose two.)

A. You must create a dynamic address entry with the C&C category and the cc_offic365 value.

B. You must apply the dynamic address entry in a security intelligence policy.

C. You must apply the dynamic address entry in a security policy.

D. You must create a dynamic address entry with the IP filter category and the ipfilter_office365 value.

Correct Answer: C,D

Question 3

You are deploying threat remediation to endpoints connected through third-party devices. In this scenario, which three statements are correct? (Choose three.)

A. All third-party switches in the specified network are automatically mapped and registered with the RADIUS server.

B. The RADIUS server sends Status-Server messages to update infected host information to the connector.

C. All third-party switches must support AAA/RADIUS and Dynamic Authorization Extensions to the RADIUS protocol.

D. The connector uses an API to gather endpoint MAC address information from the RADIUS server.

E. The connector queries the RADIUS server for the infected host endpoint details and initiates a change of authorization (CoA) for the infected host.

Correct Answer: C,D,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Which two statements are correct about DNS doctoring?

A. Proxy ARP is required if your NAT pool for the server is on a different subnet as the uplink interface

B. The DNS ALG must be enabled.

C. The DNS ALG must be disabled.

D. Proxy ARP is required if your NAT pool for the server is on the same subnet as the uplink interface.

Correct Answer: B,D

Question 5

Referring to the exhibit,

Which two statements are correct about the NAT configuration? (Choose two.)

A. Both the internal and the external host can initiate a session after the initial translation.

B. Any external host will be able to initiate a session to the reflexive address.

C. Only a specific host can initiate a session to the reflexive address after the initial session.

D. The original destination port is used for the source port for the session.

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which two statements are correct about automated threat mitigation with Security Director?
(Choose two.)

A. It provides endpoint protection by running a Juniper ATP Cloud agent on the servers.

B. It works with third-party switches.

C. It provides endpoint protection by running a Juniper ATP Cloud agent on EX Series devices.

D. It works with SRX Series devices.

Correct Answer: B,D

Question 7

You are configuring an interconnect logical system that is configured as a VPLS switch to allow two logical systems to communicate.
Which two parameters are required when configuring the logical tunnel interfaces? (Choose two.)

A. The virtual tunnel interfaces should only be configured with two logical unit pairs per logical system interconnect.

B. Encapsulation ethernet-vpls must be used.

C. The logical tunnel interfaces should be configured with two logical unit pairs per logical system interconnect.

D. Encapsulation ethernet must be used.

Correct Answer: B,C

Question 8

You are asked to configure tenant systems.
Which two statements are true in this scenario? (Choose two.)

A. Tenant systems have their own configuration database.

B. A tenant system can have only one administrator.

C. You can commit multiple tenant systems at a time.

D. After successful configuration, the changes are merged into the primary database for each tenant system.

Correct Answer: A,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Juniper Security, Professional (JNCIP-SEC) (JN0-637) Free Practice Test