Exam:JN0-636
Title:
Security,Professional (JNCIP-SEC)
https://www.passcert.com/JN0-636.html
DownloadthelatestJN0-636dumpspdftopassyourexamsuccessfully
1.Exhibit
YouareusingtraceoptionstoverifyNATsessioninformationonyourSRXSeriesdevice.Referringtothe exhibit,whichtwostatementsarecorrect?(Choosetwo)
AThisisthelastpacketinthesession
BTheSRXSeriesdeviceisperformingbothsourceanddestinationNATonthissession
CThisisthefirstpacketinthesession
DTheSRXSeriesdeviceisperformingonlysourceNATonthissession
Answer:A,B
2Exhibit
DownloadthelatestJN0-636dumpspdftopassyourexamsuccessfully
Referringtotheexhibit,whichtwostatementsaretrue?(Choosetwo)
A.The3uspiciousEndpoint3feedisonlyusablebytheSRX-1device.
BYoumustmanuallycreatethesuspiciousEndpoint3feedintheJuniperATPCloudinterface
C.The3uspiciou3Endpoint3feedisusablebyanySRXSeriesdevicethatisapartofthesamerealmas SRX-1
D.JuniperATPCloudautomaticallycreatesthe3uopi'ciouaEndpointsfeedafteryoucommitthesecurity policy
Answer:A,C
3YouarerequiredtodeployasecuritypolicyonanSRXSeriesdevicethatblocksallknownTornetwork IPaddresses
Whichtwostepswillfulfillthisrequirement?(Choosetwo)
AEnrollthedeviceswithJuniperATPAppliance
BEnrollthedeviceswithJuniperATPCloud
CEnableathird-partyTorfeed
DCreateacustomfeedcontainingallcurrentknownMACaddresses
Answer:A,D
4.YouarenotabletoactivatetheSSHhoneypotontheall-in-oneJuniperATPappliance. Whatwouldbeacauseofthisproblem?
A.Thecollectormusthaveaminimumoftwointerfaces.
BThecollectormusthaveaminimumofthreeinterfaces
C.Thecollectormusthaveaminimumoffiveinterfaces.
DThecollectormusthaveaminimumoffourinterfaces
Answer:D
Explanation:
https://wwwjunipernet/documentation/enUS/release-independent/jatp/topics/task/configuration/jatp-traff ic-collectorsetting-ssh-honeypot-detectionhtml
5Exhibit
DownloadthelatestJN0-636dumpspdftopassyourexamsuccessfully
Referringtotheexhibit,aspokememberofanADVPNisnotfunctioningcorrectly. Whichtwocommandswillsolvethisproblem?(Choosetwo)
6YouareaskedtodownloadandinstalltheIPSsignaturedatabasetoadeviceoperatinginchassis clustermode
Whichstatementiscorrectinthisscenario?
AYoumustdownloadandinstalltheIPSsignaturepackageontheprimarynode
BThefirstsynchronizationofthebackupnodeandtheprimarynodemustbeperformedmanually
CThefirsttimeyousynchronizetheIPSsignaturepackagefromtheprimarynodetothebackupnode, theprimarynodemustberebooted
DTheIPSsignaturepackagemustbedownloadedandinstalledontheprimaryandbackupnodes Answer:D
DownloadthelatestJN0-636dumpspdftopassyourexamsuccessfully
7Whichtwoadditionalconfigurationactionsarenecessaryforthethird-partyfeedshownintheexhibitto workproperly?(Choosetwo.)
AYoumustcreateadynamicaddressentrywiththeIPfiltercategoryandtheipfilteroffice365value
BYoumustcreateadynamicaddressentrywiththeC&Ccategoryandtheccoffic365value
CYoumustapplythedynamicaddressentryinasecuritypolicy
DYoumustapplythedynamicaddressentryinasecurityintelligencepolicy
Answer:A,C
8Exhibit
YouarevalidatingbidirectionaltrafficflowsthroughyourIPsectunnelThe4546sessionrepresentstraffic beingsourcedfromtheremoteendoftheIPsectunnelThe4547sessionrepresentstrafficthatis sourcedfromthelocalnetworkdestinedtotheremotenetwork
Whichstatementiscorrectregardingtheoutputshownintheexhibit?
ATheremotegatewayaddressfortheIPsectunnelis1020202
BThesessioninformationindicatesthattheIPsectunnelhasnotbeenestablished
CThelocalgatewayaddressfortheIPsectunnelis1020202
DNATisbeingusedtochangethesourceaddressofoutgoingpackets
Answer:A
9.WhatisthepurposeoftheSwitchMicroserviceofPolicyEnforcer?
Atoisolateinfectedhosts
B.toenrollSRXSeriesdeviceswithJuniperATPCloud
Ctoinspecttrafficformalware
D.tosynchronizesecuritypoliciestoSRXSeriesdevices
Answer:B
10Exhibit
DownloadthelatestJN0-636dumpspdftopassyourexamsuccessfully
AnadministratorwantstoconfigureanSRXSeriesdevicetologbinarysecurityeventsfortenant systems
Referringtotheexhibit,whichstatementwouldcompletetheconfiguration?
AConfigurethetenantasTSYS1forthepisecurityprofile
B.Configurethetenantasrootforthepisecurityprofile.
CConfigurethetenantasmasterforthepisecurityprofile
DConfigurethetenantaslocalforthepisecurityprofile
Answer:B