JN0-636 Online Practice Questions and Answers

Which two features would be used for DNS doctoring on an SRX Series firewall? (Choose two.)

A. The DNS ALG must be enabled.

B. static NAT

C. The DNS ALG must be disabled.

D. source NAT

Which two types of source NAT translations are supported in this scenario? (Choose two.)

A. translation of IPv4 hosts to IPv6 hosts with or without port address translation

B. translation of one IPv4 subnet to one IPv6 subnet with port address translation

C. translation of one IPv6 subnet to another IPv6 subnet without port address translation

D. translation of one IPv6 subnet to another IPv6 subnet with port address translation

All interfaces involved in transparent mode are configured with which protocol family?

A. mpls

B. bridge

C. inet

D. ethernet -- switching

Your IPsec VPN configuration uses two CoS forwarding classes to separate voice and data traffic. How many IKE security associations are required between the IPsec peers in this scenario?

B. 3

C. 4

D. 2

Click the Exhibit button.

When attempting to enroll an SRX Series device to JATP, you receive the error shown in the exhibit. What is the cause of the error?

A. The fxp0 IP address is not routable

B. The SRX Series device certificate does not match the JATP certificate

C. The SRX Series device does not have an IP address assigned to the interface that accesses JATP

D. A firewall is blocking HTTPS on fxp0

Exhibit An administrator wants to configure an SRX Series device to log binary security events for tenant systems. Referring to the exhibit, which statement would complete the configuration?

A. Configure the tenant as TSYS1 for the pi security profile.

B. Configure the tenant as root for the pi security profile.

C. Configure the tenant as master for the pi security profile.

D. Configure the tenant as local for the pi security profile

Exhibit

Which two statements are correct about the output shown in the exhibit? (Choose two.)

A. The packet is processed as host inbound traffic.

B. The packet matches the default security policy.

C. The packet matches a configured security policy.

D. The packet is processed in the first path packet flow.

Exhibit

Which two statements are correct about the output shown in the exhibit? (Choose two.)

A. The packet is silently discarded.

B. The packet is part of an existing session.

C. The packet is part of a new session.

D. The packet is explicitly rejected.

Your Source NAT implementation uses an address pool that contains multiple IPv4 addresses Your users report that when they establish more than one session with an external application, they are prompted to authenticate multiple times External hosts must not be able to establish sessions with internal network hosts.

What will solve this problem?

A. Disable PAT.

B. Enable destination NAT.

C. Enable persistent NAT

D. Enable address persistence.

Exhibit Referring to the exhibit, which three statements are true? (Choose three.)

A. The packet's destination is to an interface on the SRX Series device.

B. The packet's destination is to a server in the DMZ zone.

C. The packet originated within the Trust zone.

D. The packet is dropped before making an SSH connection.

E. The packet is allowed to make an SSH connection.