Juniper JN0-635 - Security, Professional Exam
Page: 3 / 13
Total 65 questions
Question #11 (Topic: Topic 1)
Which three types of peer devices are supported for CoS-based IPsec VPNs? (Choose three.)
A. branch SRX Series device
B. third-party device
C. cSRX
D. high-end SRX Series device
E. vSRX
Answer: ADE
Question #12 (Topic: Topic 1)
You are asked to configure a new SRX Series CPE device at a remote office. The device must participate in forwarding MPLS and IPsec traffic.
Which two statements are true regarding this implementation? (Choose two.)
Which two statements are true regarding this implementation? (Choose two.)
A. Host inbound traffic must not be processed by the flow module
B. Host inbound traffic must be processed by the flow module
C. The SRX Series device can process both MPLS and IPsec with default traffic handling
D. A firewall filter must be configured to enable packet mode forwarding
Answer: AD
Question #13 (Topic: Topic 1)
Which three roles or protocols are required when configuring an ADVPN? (Choose three.)
A. OSPF
B. shortcut partner
C. shortcut suggester
D. IKEv1
E. BGP
Answer: ABC
Question #14 (Topic: Topic 1)
You must troubleshoot ongoing problems with IPsec tunnels and security policy processing. Your network consists of SRX340s and SRX5600s.
In this scenario, which two statements are true? (Choose two.)
In this scenario, which two statements are true? (Choose two.)
A. IPsec logs are written to the kmd log file by default
B. IKE logs are written to the messages log file by default
C. You must enable data plane logging on the SRX340 devices to generate security policy logs
D. You must enable data plane logging on the SRX5600 devices to generate security policy logs
Answer: AD
Question #15 (Topic: Topic 1)
Click the Exhibit button.
[Juniper-JN0-635-1.0/xmlfile-11_1.png]
You are implementing a new branch site and want to ensure Internet traffic is sent directly to your ISP and other traffic is sent to your company headquarters. You
have configured filter-based forwarding to accomplish this objective. You verify proper functionality using the outputs shown in the exhibit.
Which two statements are true in this scenario? (Choose two.)
[Juniper-JN0-635-1.0/xmlfile-11_1.png]
You are implementing a new branch site and want to ensure Internet traffic is sent directly to your ISP and other traffic is sent to your company headquarters. You
have configured filter-based forwarding to accomplish this objective. You verify proper functionality using the outputs shown in the exhibit.
Which two statements are true in this scenario? (Choose two.)
A. The session utilizes one routing instance
B. The ge-0/0/5 and ge-0/0/1 interfaces must reside in a single security zone
C. The ge-0/0/5 and ge-0/0/1 interfaces can reside in different security zones
D. The session utilizes two routing instances
Answer: AC
