JN0-636 by Juniper Valid Free Exam Practice Test

Question 1

Refer to the Exhibit.

Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)

A. Topology 1 B. Topology 3 C. Topology 2 D. Topology 4 E. Topology 5

Correct Answer: A,B,D

Question 2

Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)

A. The 3uspiciou3_Endpoint3 feed is usable by any SRX Series device that is a part of the same realm as SRX-1 B. Juniper ATP Cloud automatically creates the 3uopi'cioua_Endpoints feed after you commit the security policy. C. The 3uspicious_Endpoint3 feed is only usable by the SRX-1 device. D. You must manually create the suspicious_Endpoint3 feed in the Juniper ATP Cloud interface.

Correct Answer: A,B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

your company wants to take your juniper ATP appliance into private mode. You must give them a list of impacted features for this request.
Which two features are impacted in this scenario? (Choose two)

A. False Positive Reporting B. Threat Progression Monitoring C. GSS Telemetry D. Cyber Kill Chain mapping

Correct Answer: A,C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

Which two modes are supported on Juniper ATP Cloud? (Choose two.)

A. global mode B. Layer 3 mode C. private mode D. transparent mode

Correct Answer: B,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

While troubleshooting security policies, you added the count action. Where do you see the result of this action?

A. In the show security policies detail command output. B. In the show security policies hit-count command output. C. In the show firewall log command output. D. In the show security flow statistics command output.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

You have a webserver and a DNS server residing in the same internal DMZ subnet. The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface. You implement DNS doctoring to ensure remote users can access the webserver.Which two statements are true in this scenario? (Choose two.)

A. The DNS doctoring ALG is not enabled by default. B. The DNS doctoring ALG is enabled by default. C. The DNS CNAME record is translated. D. The Proxy ARP feature must be configured.

Correct Answer: B,D

Question 7

you must create a secure fabric in your company's network
In this Scenario, Which three statements are correct? (Choose Three)

A. Switches and connectors cannot be added to the same site B. MX Series device associated with tenants can belong to only one site C. SRX Series devices can belong to only one site D. A switch must be assigned to the site to enforce an infected host policy within the network E. SRX Series devices can belong to multiple sites

Correct Answer: A,C,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 8

You are asked to allocate security profile resources to the interconnect logical system for it to work properly.
In this scenario, which statement is correct?

A. No resources are needed to be allocated to the interconnect logical system. B. The flow-session resource must be defined in the security profile for the interconnect logical system. C. The NAT resources must be defined in the security profile for the interconnect logical system. D. The resources must be calculated based on the amount of traffic that will flow between the logical systems.

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Juniper Security, Professional (JNCIP-SEC) - JN0-636 Exam Practice Test