Free Security, Professional Exam JN0-636 Exam Practice Test

Your IPsec VPN configuration uses two CoS forwarding classes to separate voice and data traffic. How many IKE security associations are required between the IPsec peers in this scenario?

• 1
• 3
• 4
• 2

You are asked to determine if the 203.0.113.5 IP address has been added to the third-party security feed, DS hield, from Juniper Seclnte1. You have an SRX Series device that is using Seclnte1 feeds from Juniper ATP Cloud Which command will return this information?

• show security dynamic—address category—name CC | match 203.0.113.5
• show security dynamic—address category—name Infected—Hosts | match 203.0.113.5
• show security dynamic-address category-name IPFilter I match 203.0.113.5
• show Security dynamic-address category-name JWAS | match 203.0.113.5

Your company uses non-Juniper firewalls and you are asked to provide a Juniper solution for zero-day malware protection. Which solution would work in this scenario?

• Juniper ATP Cloud
• Juniper Secure Analytics
• Juniper ATP Appliance
• Juniper Security Director

To analyze and detect malware, Juniper ATP Cloud performs which two functions? (Choose two.)

• cache lookup: to see if the file is seen already and known to be malicious
• antivirus scan: with a single vendor solution to see if the file contains any potential threats
• dynamic analysis: to see what happens if you execute the file in a real environment
• static analysis: to see what happens if you execute the file in a real environment

Your Source NAT implementation uses an address pool that contains multiple IPv4 addresses Your users report that when they establish more than one session with an external application, they are prompted to authenticate multiple times External hosts must not be able to establish sessions with internal network hosts What will solve this problem?

• Disable PAT.
• Enable destination NAT.
• Enable persistent NAT
• Enable address persistence.

Which two types of source NAT translations are supported in this scenario? (Choose two.)

• translation of IPv4 hosts to IPv6 hosts with or without port address translation
• translation of one IPv4 subnet to one IPv6 subnet with port address translation
• translation of one IPv6 subnet to another IPv6 subnet without port address translation
• translation of one IPv6 subnet to another IPv6 subnet with port address translation

You want to identify potential threats within SSL-encrypted sessions without requiring SSL proxy to decrypt the session contents. Which security feature achieves this objective?

• infected host feeds
• encrypted traffic insights
• DNS security
• Secure Web Proxy

You are asked to deploy filter-based forwarding on your SRX Series device for incoming traffic sourced from the 10.10 100 0/24 network in this scenario, which three statements are correct? (Choose three.)

• You must create a forwarding-type routing instance.
• You must create and apply a firewall filter that matches on the source address 10.10.100.0/24 and then sends this traffic to your routing
• You must create and apply a firewall filter that matches on the destination address 10 10.100.0/24 and then sends this traffic to your routing instance.
• You must create a RIB group that adds interface routes to your routing instance.
• You must create a VRF-type routing instance.

You are requested to enroll an SRX Series device with Juniper ATP Cloud. Which statement is correct in this scenario?

• If a device is already enrolled in a realm and you enroll it in a new realm, the device data or configuration information is propagated to the new realm.
• The only way to enroll an SRX Series device is to interact with the Juniper ATP Cloud Web portal.
• When the license expires, the SRX Series device is disenrolled from Juniper ATP Cloud without a grace period
• Juniper ATP Cloud uses a Junos OS op script to help you configure your SRX Series device to connect to the Juniper ATP Cloud service.

Which two modes are supported on Juniper ATP Cloud? (Choose two.)

• global mode
• transparent mode
• private mode
• Layer 3 mode