Juniper JN0-633 問題集

質問 1：
Which two are required for the SRX device to perform DNS doctoring? (Choose two.)
A. dns-doctoring stanza
B. static NAT
C. name-server
D. DNS ALG
正解：B,D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You have been asked to establish a dynamic IPsec VPN between your SRX device and a remote user.Regarding this scenario, which three statements are correct? (Choose three.)
A. You must use preshared keys.
B. Only policy-based VPNs are supported.
C. IKE aggressive mode must be used.
D. You can use all methods of encryption.
E. Only predefined proposal sets can be used.
正解：A,B,C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Click the Exhibit button.

-- Exhibit --
Feb 8 10:39:40 Unable to find phase-1 policy as remote peer:2.2.2.2 is not recognized.
Feb 8 10:39:40 KMD_PM_P1_POLICY_LOOKUP_FAILURE.Policy lookup for Phase-1 [responder] failed for p1_local=ipv4(any:0,[0..3]=1.1.1.2) p1_remote=ipv4(any:0,[0..3]=2.2.2.2)
Feb 8 10:39:40 1.1.1.2:500 (Responder) <-> 2.2.2.2:500 { dbe1d0af - a4d6d829 f9ed3bba [-1] / 0x00000000 } IP; Error = No proposal chosen (14)
-- Exhibit -
According to the log shown in the exhibit, you notice that the IPsec session is not establishing.
What are two reasons for this behavior? (Choose two.)
A. mismatched proxy ID
B. incorrect peer address
C. mismatched peer ID
D. mismatched preshared key
正解：B,C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Click the Exhibit button. [edit]
user@host# show interfaces
ge-0/0/1 {
unit 0 {
family bridge {
interface-mode access;
vlan-id 20;
}
}
}
ge-0/0/10 {
unit 0 {
family bridge {
interface-mode access;
vlan-id 20;
}
}
}
[edit]
user@host# show bridge-domains
d1 {
domain-type bridge;
vlan-id 20;
}
[edit]
user@host# show security flow bridge
[edit]
user@host# show security zones
security-zone 12 {
host-inbound-traffic {
system-services {
any-service;
}
}
interfaces {
ge-0/0/1.0;
ge-0/0/10.0;
}
}
Referring to the exhibit, which statement is true?
A. Packets sent tom the SRX Series device are sent to the RE.
B. Only frames that do not have any VLAN tags are accepted.
C. Only frames that have a VLAN ID of 20 are accepted.
D. Packets sent to the SRX Series device are discarded.
正解：C

質問 5：
You must ensure that your Layer 2 traffic is secured on your SRX Series device in transparent mode.
What must be considered when accomplishing this task?
A. Security policies are not supported when operating in transparent mode.
B. Layer 2 interfaces must use theethernet-switchingprotocol family.
C. You must reboot your device after configuring transparent mode.
D. Screens are not supported in your security zones with transparent mode.
正解：C

質問 6：
What are two AppSecure modules? (Choose two.)
A. AppTrack
B. AppDoS
C. AppFlow
D. AppNAT
正解：A,B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Click the Exhibit button.
user@key-server> show security group-vpn server ike security-associations Index State Initiator cookie Responder cookie Mode Remote Address 97 UP bb224408940cc5d 435b9404284083c2 Main 192.168.11.1 98 UP 242c840089404d15 ab19284089408ba8 Main 192.168.11.2
user@key-server> show security group-vpn server ipsec security-associations Group: group-1, Group Id: 1 Total IPsec SAs: 1 IPsec SA Algorithm SPI Lifetime group-l-sa ESP:3des/shal 1343991c 2736 Group: group-2, Group id: 2 Total IPsec SAs: 1 IPsec SA Algorithm SPI Lifetime group-2-sa ESP:3des/shal 13be9e9 2741 Group: group-3, Group Id: 3 Total IPsec SAs: 1 IPsec SA Algorithm SPI Lifetime group-3-sa ESP:3des/shal 20709057 2741 Group: group-4, Group Id: 4 Total IPsec SAs: 1 IPsec SA Algorithm SPI Lifetime group-4-sa ESP:3des/shal 5111c2e1 2741
Which statement is correct regarding the outputs shown in the exhibit?
A. Two established peers are in the group VPNs.
B. No established peer is in the group VPNs.
C. Four established peers are in the group VPNs.
D. One established peer is in the group VPNs.
正解：A