Juniper JN0-635 問題集

質問 1：
Click the Exhibit button.

Your company has purchased a competitor and now must connect the new network to the existing one. The competitor's gateway device is receiving its ISP address using DHCP.
Communication between the two sites must be secured; however, obtaining a static public IP address for the new site gateway is not an option at this time. The company has several requirements for this solution:
- A site-to-site IPsec VPN must be used to secure traffic between the
two sites;
- The IKE identity on the new site gateway device must use the hostname option; and
- Internet traffic from each site should exit through its local
Internet connection.
The configuration shown in the exhibit has been applied to the new site's SRX, but the secure tunnel is not working.
In this scenario, what configuration change is needed for the tunnel to come up?
A. Change the IKE policy mode to aggressive
B. Remove the quotes around the hostname
C. Bind interface st0 to the gateway
D. Apply a static address to ge-0/0/2
正解：B

質問 2：
Click the Exhibit button.

You are implementing a new branch site and want to ensure Internet traffic is sent directly to your ISP and other traffic is sent to your company headquarters. You have configured filter-based forwarding to accomplish this objective. You verify proper functionality using the outputs shown in the exhibit.
Which two statements are true in this scenario? (Choose two.)
A. The ge-0/0/5 and ge-0/0/1 interfaces must reside in a single security zone
B. The session utilizes two routing instances
C. The ge-0/0/5 and ge-0/0/1 interfaces can reside in different security zones
D. The session utilizes one routing instance
正解：C,D

質問 3：
What is a secure key management protocol used by IPsec?
A. AH
B. IKE
C. ESP
D. TCP
正解：B

質問 4：
Click the Exhibit button.

You have configured tenant systems on your SRX Series device.
Referring to the exhibit, which two actions should you take to facilitate inter-TSYS communication? (Choose two.)
A. Place the logical tunnel interfaces in a VPLS routing instance in the interconnect switch
B. Connect each TSYS with the interconnect switch by configuring Ethernet VPLS configured logical tunnel interfaces in the interconnect switch
C. Place the logical tunnel interfaces in a virtual router routing instance in the interconnect switch
D. Connect each TSYS with the interconnect switch by configuring INET configured logical tunnel interfaces in the interconnect switch
正解：C,D

質問 5：
Click the Exhibit button.

Referring to the exhibit, you have expanded the disk storage size in ESXi for your log collector from 500 GB to 600 GB. However, your log collector's disk size has not changed.
Given the scenario, which two statements are true? (Choose two.)
A. You must run a script from the console to expand the disk size.
B. You must re-run the log collector setup script to update the storage settings.
C. You must reboot the log collector for storage settings to be updated
D. The ESXi storage parameter is not associated with the Elasticsearch disk size parameter.
正解：A,C

質問 6：
You have a webserver and a DNS server residing in the same internal DMZ subnet.
The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface.
You implement DNS doctoring to ensure remote users can access the webserver.
Which two statements are true in this scenario? (Choose two.)
A. The DNS doctoring ALG is not enabled by default.
B. The DNS doctoring ALG is enabled by default.
C. The DNS CNAME record is translated.
D. The Proxy ARP feature must be configured.
正解：B,D

質問 7：
You are asked to look at a configuration that is designed to take all traffic with a specific source ip address and forward the traffic to a traffic analysis server for further evaluation.
The configuration is no longer working as intended.
Referring to the exhibit which change must be made to correct the configuration?
A. Apply the filter as in input filter on interface xe-0/0/1.0
B. Apply the filter as in input filter on interface xe-0/2/1.0
C. Create a routing instance named default
D. Apply the filter as in output filter on interface xe-0/1/0.0
正解：A

質問 8：
Click the Exhibit button.

Referring to the exhibit, which statement is true?
A. SSH is securing data across the control interface
B. ARP security is securing data across the control interface
C. MACsec is securing data across the control interface
D. IPsec is securing data across the control interface
正解：C
解説: (Topexam メンバーにのみ表示されます)