Free Security, Professional Exam JN0-636 Exam Practice Test

You are asked to detect domain generation algorithms Which two steps will accomplish this goal on an SRX Series firewall? (Choose two.)

• Define an advanced-anti-malware policy under [edit services].
• Attach the security-metadata-streaming policy to a security
• Define a security-metadata-streaming policy under [edit
• Attach the advanced-anti-malware policy to a security policy.

Which two statements are correct regarding tenant systems on SRX Series devices? (Choose two.)

• A maximum of 32 tenant systems can be configured on a physical SRX device.
• All tenant systems share a single routing protocol process.
• Each tenant system runs its own instance of the routing protocol process
• A maximum of 500 tenant systems can be configured on a physical SRX device.

What are two valid modes for the Juniper ATP Appliance? (Choose two.)

• flow collector
• event collector
• all-in-one
• core

Which two modes are supported on Juniper ATP Cloud? (Choose two.)

• global mode
• transparent mode
• private mode
• Layer 3 mode

You are asked to download and install the IPS signature database to a device operating in chassis cluster mode. Which statement is correct in this scenario?

• You must download and install the IPS signature package on the primary node.
• The first synchronization of the backup node and the primary node must be performed manually.
• The first time you synchronize the IPS signature package from the primary node to the backup node, the primary node must be rebooted.
• The IPS signature package must be downloaded and installed on the primary and backup nodes.

You are requested to enroll an SRX Series device with Juniper ATP Cloud. Which statement is correct in this scenario?

• If a device is already enrolled in a realm and you enroll it in a new realm, the device data or configuration information is propagated to the new realm.
• The only way to enroll an SRX Series device is to interact with the Juniper ATP Cloud Web portal.
• When the license expires, the SRX Series device is disenrolled from Juniper ATP Cloud without a grace period
• Juniper ATP Cloud uses a Junos OS op script to help you configure your SRX Series device to connect to the Juniper ATP Cloud service.

You are connecting two remote sites to your corporate headquarters site.You must ensure that all traffic is secured and sent directly between sites In this scenario, which VPN should be used?

• IPsec ADVPN
• hub-and-spoke IPsec VPN
• Layer 2 VPN
• full mesh Layer 3 VPN with EBGP

Which two features would be used for DNS doctoring on an SRX Series firewall? (Choose two.)

• The DNS ALG must be enabled.
• static NAT
• The DNS ALG must be disabled.
• source NAT

You are required to deploy a security policy on an SRX Series device that blocks all known Tor network IP addresses. Which two steps will fulfill this requirement? (Choose two.)

• Enroll the devices with Juniper ATP Appliance.
• Enroll the devices with Juniper ATP Cloud.
• Enable a third-party Tor feed.
• Create a custom feed containing all current known MAC addresses.

Your company wants to use the Juniper Seclntel feeds to block access to known command and control servers, but they do not want to use Security Director to manage the feeds. Which two Juniper devices work in this situation? (Choose two)

• EX Series devices
• MX Series devices
• SRX Series devices
• QFX Series devices