Juniper JN0-635 問題集

質問 1：
You are scanning files that are being transferred from the Internet to hosts on your internal network with Sky ATP. However, you notice that files that are 1 GB in size are not being scanned by Sky ATP.
In this scenario, which two statements are true? (Choose two.)
A. The 1 GB file size is larger than the scan size limit for Sky ATP.
B. The Sky ATP failback option is set to permit.
C. The Sky ATP policy on the SRX Series device is misconfigured.
D. The Sky ATP engine or the SRX Series device is too busy.
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Click the Exhibit button.

Referring to the exhibit, which statement is true?
A. E-mails from the [email protected] address are allowed by the allow whitelist.
B. E-mails from the [email protected] address are marked with SPAM in the subject line by the spam block list server.
C. E-mails from the [email protected] address are blocked by the reject blacklist.
D. E-mails from the [email protected] address are blocked by the spam list server.
正解：A

質問 3：
Which interface family is required for Layer 2 transparent mode on SRX Series devices?
A. VPLS
B. LLDP
C. Ethernet switching
D. inet
正解：C

質問 4：
Your SRX Series device does not see the SYN packet.
What is the default action in this scenario?
A. The device will forward the subsequent packets and the session will not be established
B. The device will forward the subsequent packets and the session will be established
C. The device will drop the subsequent packets and the session will be established
D. The device will drop the subsequent packets and the session will not be established
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)
A. The application firewall rule is not inspecting encrypted traffic.
B. The rule set uses application definitions from the predefined library.
C. There are two rules configured in the rule set.
D. The configured rule set matches most analyzed applications.
正解：A,B

質問 6：
Your network includes SRX Series devices configured with AppSecure.
Which two statements regarding the application identification engine are true? (Choose two.)
A. Applications are only matched in traffic flows associated with client-to-server sessions.
B. If the packets entering the engine match a known application, then processing continues.
C. Applications are matched in traffic flows associated with client-to-server and server-to- client sessions.
D. If the packets entering the engine match a known application, then processing stops.
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Which three roles or protocols are required when configuring an ADVPN? (Choose three.)
A. shortcut suggester
B. BGP
C. OSPF
D. shortcut partner
E. IKEv1
正解：A,C,D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Click the Exhibit button.

Your company has purchased a competitor and now must connect the new network to the existing one. The competitor's gateway device is receiving its ISP address using DHCP.
Communication between the two sites must be secured; however, obtaining a static public IP address for the new site gateway is not an option at this time. The company has several requirements for this solution:
- A site-to-site IPsec VPN must be used to secure traffic between the
two sites;
- The IKE identity on the new site gateway device must use the hostname option; and
- Internet traffic from each site should exit through its local
Internet connection.
The configuration shown in the exhibit has been applied to the new site's SRX, but the secure tunnel is not working.
In this scenario, what configuration change is needed for the tunnel to come up?
A. Change the IKE policy mode to aggressive
B. Remove the quotes around the hostname
C. Bind interface st0 to the gateway
D. Apply a static address to ge-0/0/2
正解：B