Juniper JN0-635 問題集

質問 1：
Click the Exhibit button.

You have configured tenant systems on your SRX Series device.
Referring to the exhibit, which two actions should you take to facilitate inter-TSYS communication? (Choose two.)
A. Place the logical tunnel interfaces in a VPLS routing instance in the interconnect switch
B. Connect each TSYS with the interconnect switch by configuring Ethernet VPLS configured logical tunnel interfaces in the interconnect switch
C. Place the logical tunnel interfaces in a virtual router routing instance in the interconnect switch
D. Connect each TSYS with the interconnect switch by configuring INET configured logical tunnel interfaces in the interconnect switch
正解：C,D

質問 2：
Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high availability chassis cluster and are expected to support several UTM features.
Which two statements related to this environment are true? (Choose two.)
A. The chassis cluster must be configured for active/backup mode.
B. UTM features must be configured on the primary node within the cluster.
C. UTM features can be configured on either of the nodes within the cluster.
D. The chassis cluster must be configured for active/active mode.
正解：A,C

質問 3：
Referring to the exhibit, how many AppTrack logs will be generated for an HTTP session lasting
12 minutes?

A. 2
B. 3
C. 4
D. 1
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A customer has recently deployed a next-generation firewall, sandboxing software, cloud access security brokers (CASB), and endpoint protection.
In this scenario, which tool would provide the customer with additional attack prevention?
A. Security Director Policy Enforcer
B. Junos Space Cross Provisioning Platform
C. Network Director Inventory Manager
D. Contrail
正解：A

質問 5：
After using Security Director to add a new firewall policy rule on an SRX Series device, you notice that the hit count on the policy is not increasing. Upon further investigation, you find that the devices listed in the new rule are able to communicate as expected. Your firewall policy consists of hundreds of rules.
Using only Security Director, how do you find the rule that is allowing the communication to occur in this scenario?
A. Generate a Top Source IPs report.
B. Generate a Policy Analysis report.
C. Generate a Top Firewall Events report.
D. Generate a Top Firewall Rules report.
正解：C

質問 6：
What are three types of content that are filtered by the Junos UTM feature set? (Choose three.)
A. SIP
B. SSL
C. HTTP
D. FTP
E. IMAP
正解：C,D,E
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Click the Exhibit button.
[edit protocols ospf area 0.0.0.0]
user@host# run show security ike security-associations
Index State Initiator cookie Responder cookie Mode Remote
Address
3289542 UP 48d928408940de28 e418fc7702fe483b Main
172.31.50.1
3289543 UP eb45940484082b14 428086b100427326 Main 10.10.50.1
[edit protocols ospf area 0.0.0.0]
user@host# run show security ipsec; security-associations
Total active tunnels: 2
ID Algorithm SPI Life:sec/kb Mon lsys Port Gateway
<131073 ESP:des/ shal 6d40899b 1360/ unlim - root 500 10.10.50.1
>131073 ESP:des/ shal 5a89400e 1360/ unlim - root 500 10.10.50.1
<131074 ESP:des/ shal c04046f 1359/ unlim - root 500 172.31.50.1
>131074 ESP:des/ shal 5508946c 1359/ unlim - root 500 172.31.50.1
[edit protocols ospf area 0.0.0.0]
user@host# run show ospf neighbor
Address Interface State ID Pri Dead 10.40.60.1 st0.0 Init 10.30.50.1
128 35
10.40.60.2 st0.0 Full 10.30.50.1 128 31
[edit protocols ospf area 0.0.0.0]
user@host# show
interface st0.0;
You have already configured a hub-and-spoke VPN with one hub device and two spoke devices. However, the hub device has one neighbor in the Init state and one neighbor in the Full state.
What would you do to resolve this problem?
A. Configure the st0.0 interface under OSPF as a nonbroadcast multiple access interface.
B. Configure the st0.0 interface under OSPF as a point-to-multipoint interface.
C. Configure the st0.0 interface under OSPF as a point-to-point interface.
D. Configure the st0.0 interface under OSPF as an unnumbered interface.
正解：B

質問 8：
You configured a security policy permitting traffic from the trust zone to the DMZ zone, inserted the new policy at the top of the list, and successfully committed it to the SRX Series device. Upon monitoring, you notice that the hit count does not increase on the newly configured policy.
In this scenario, which two commands would help you to identify the problem? (Choose two.)
A. user@srx> show security shadow-policies from zone trust to zone DMZ
B. user@srx> show security zones trust detail
C. user@srx> show security match-policies from-zone trust to-zone DMZ source-ip
192.168.10.100/32
destination-ip 10.10.10.80/32 protocol tcp source-port 5806 destination-port 443 result-count 10
D. user@srx> show security match-policies from-zone trust to-zone DMZ source-ip
192.168.10.100/32
destination-ip 10.10.10.80/32 protocol tcp source-port 5806 destination-port
正解：A,C
解説: (Topexam メンバーにのみ表示されます)