Security, Professional (JNCIP-SEC) - JN0-636 Exam Practice Test

Question 1

Exhibit.

A hub member of an ADVPN is not functioning correctly.
Referring the exhibit, which action should you take to solve the problem?

A. [edit security]
user@hub-1# delete ike gateway advpn-gateway advpn partner

B. [edit interfaces]
root@vSRX-1# delete st0.0 multipoint

C. [edit security]
user@hub-1# set ike gateway advpn-gateway advpn suggester disable

D. [edit interfaces]
user@hub-1# delete ipsec vpn advpn-vpn traffic-selector

Correct Answer: D

Question 2

Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)

A. The data that traverses the ge-070/0 interface cannot be intercepted and read by anyone.

B. The data that traverses the ge-0/070 interface is secured by a secure association key.

C. The data that traverses the ge-070/0 interface can be intercepted and read by anyone.

D. The data that traverses the ge-O/0/0 interface is secured by a connectivity association key.

Correct Answer: A,B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Exhibit

You configure Source NAT using a pool of addresses that are in the same subnet range as the external ge-0/0/0 interface on your vSRX device. Traffic that is exiting the internal network can reach external destinations, but the return traffic is being dropped by the service provider router.
Referring to the exhibit, what must be enabled on the vSRX device to solve this problem?

A. STUN

B. Proxy ARP

C. Persistent NAT

D. DNS Doctoring

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

Which two types of source NAT translations are supported in this scenario? (Choose two.)

A. translation of one IPv6 subnet to another IPv6 subnet without port address translation

B. translation of IPv4 hosts to IPv6 hosts with or without port address translation

C. translation of one IPv4 subnet to one IPv6 subnet with port address translation

D. translation of one IPv6 subnet to another IPv6 subnet with port address translation

Correct Answer: A,B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

While troubleshooting security policies, you added the count action. Where do you see the result of this action?

A. In the show security policies hit-count command output.

B. In the show firewall log command output.

C. In the show security flow statistics command output.

D. In the show security policies detail command output.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

Exhibit:
The security trace options configuration shown in the exhibit is committed to your SRX series firewall. Which two statements are correct in this Scenario? (Choose Two)

A. Once the trace has generated 10 log files, the trace process will halt.

B. The file debugger will be readable only by the user who committed this configuration

C. The file debugger will be readable by all users.

D. Once the trace has generated 10 log files, older logs will be overwritten.

Correct Answer: B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Juniper Security, Professional (JNCIP-SEC) - JN0-636 Exam Practice Test

Latest Update

Useful Links

Contact Us