Juniper JN0-635 問題集

質問 1：
Click the Exhibit button.

The IKE policy and proposal are configured properly on both devices as shown in the exhibit.
Which configuration snippet will complete the IKE configuration on the branch SRX Series device?
A.

B.

C.

D.

正解：C

質問 2：
Which two statements are true about ADVPN members? (Choose two.)
A. ADVPN members are authenticated using pre-shared keys
B. ADVPN members can use IKEv1
C. ADVPN members are authenticated using certificates
D. ADVPN members can use IKEv2
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You are asked to configure a new SRX Series CPE device at a remote office. The device must participate in forwarding MPLS and IPsec traffic.
Which two statements are true regarding this implementation? (Choose two.)
A. Host inbound traffic must not be processed by the flow module
B. Host inbound traffic must be processed by the flow module
C. The SRX Series device can process both MPLS and IPsec with default traffic handling
D. A firewall filter must be configured to enable packet mode forwarding
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
According to the log shown in the exhibit, you notice the IPsec session is not establishing.
What is the reason for this behavior?
A. Incorrect peer address.
B. Mismatched preshared key
C. Mismatched peer ID
D. Mismatched proxy ID
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Click the Exhibit button.

Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)
A. Topology 4
B. Topology 2
C. Topology 5
D. Topology 1
E. Topology 3
正解：A,D,E
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A customer has recently deployed a next-generation firewall, sandboxing software, cloud access security brokers (CASB), and endpoint protection.
In this scenario, which tool would provide the customer with additional attack prevention?
A. Security Director Policy Enforcer
B. Junos Space Cross Provisioning Platform
C. Network Director Inventory Manager
D. Contrail
正解：A

質問 7：
You have noticed a high number of TCP-based attacks directed toward your primary edge device.
You are asked to configure the IDP feature on your SRX Series device to block this attack.
Which two IDP attack objects would you configure to solve this problem? (Choose two.)
A. Signature
B. Network
C. Protocol anomaly
D. host
正解：A,C

質問 8：
You are asked to configure an SRX Series device to bypass all security features for IP traffic from the engineering department.
Which firewall filter will accomplish this task?
A.

B.

C.

D.

正解：A