JN0-635 Online Practice Questions and Answers

Click the Exhibit button.

Referring to the exhibit, which statement is true?

A. ARP security is securing data across the control interface

B. IPsec is securing data across the control interface

C. SSH is securing data across the control interface

D. MACsec is securing data across the control interface

You are asked to merge to corporate network with the network from a recently acquired company. Both networks use the same private IPv4 address space (172.25.126.0/24). An SRX Series device servers as the gateway for each network.

Which solution allows you to merge the two networks without modifying the current address assignments?

A. persistent NAT

B. NAT46

C. source NAT

D. double NAT

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

A. Data is transmitted across the link in plaintext

B. The link is not protected against man-in-the-middle attacks

C. The link is protected against man-in-the-middle attacks

D. Data is transmitted across the link in cyphertext

You are asked to secure your network against TOR network traffic.

Which two Juniper products would accomplish this task? (Choose two.)

A. Contrail Edge

B. Contrail Insights

C. Juniper Sky ATP

D. Juniper ATP Appliance

When would you use the port-overloading-factor 1 setting?

A. to enable the port-overloading

B. to disable the port-overloading

C. to map ports with 1:1 ratio for port-overloading

D. to set the maximum port-overloading capacity to 65,536

Click the Exhibit button.

You deployed a site-to-site IPsec VPN connecting two data centers together using SRX5800s. After examining the performance of the IPsec VPN, you decide to enable IPsec performance acceleration to increase the rate of traffic that can be sent through the tunnel.

Referring to the exhibit, which two statements should you add to the configuration to accomplish this task? (Choose two.)

A. [edit security flow] user@srx# set tcp-mss ipsec-vpn mss 65535

B. [edit security flow] user@srx# set ipsec-performance-acceleration

C. [edit security flow] user@srx# set power-mode-ipsec

D. [edit security flow] user@srx# set load-distribution session-affinity ipsec

Click the Exhibit button.

Given the command output shown in the exhibit, which two statements are true? (Choose two.)

A. The host 172.31.15.1 is directly connected to interface ge-0/0/3.0

B. Traffic matching this session has been received since the session was established

C. The host 10.10.101.10 is directly connected to interface ge-0/0/4.0

D. Network Address Translation is applied to this session

You have a remote access VPN where the remote users are using the NCP client. The remote users can access the internal corporate resources as intended; however, traffic that is destined to all other Internet sites is going through the remote access VPN. You want to ensure that only traffic that is destined to the internal corporate resources use the remote access VPN.

Which two actions should you take to accomplish this task? (Choose two.)

A. Enable the split tunneling feature within the VPN configuration on the SRX Series device

B. Enable IKEv2 within the VPN configuration on the SRX Series device

C. Configure the necessary traffic selectors within the VPN configuration on the SRX Series device

D. Configure split tunneling on the NCP profile on the remote client

You must implement an IPsec VPN on an SRX Series device using PKI certificates for authentication. As

part of the implementation, you are required to ensure that the certificate submission, renewal, and

retrieval processes are handled automatically from the certificate authority.

In this scenario, which statement is correct.

A. You can use CRL to accomplish this behavior.

B. You can use SCEP to accomplish this behavior.

C. You can use OCSP to accomplish this behavior.

D. You can use SPKI to accomplish this behavior.

Which three type of peer devices are supported for Cos-Based IPsec VPN?

A. High-end SRX Series device

B. cSRX

C. vSRX

D. Branch-end SRX Series devics