Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Juniper JN0-635

Juniper JN0-635 Exam Practice Questions (P. 3)

  • Full Access (65 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #11
Which three types of peer devices are supported for CoS-based IPsec VPNs? (Choose three.)
  1. A
    branch SRX Series device
  2. B
    third-party device
  3. C
    cSRX
  4. D
    high-end SRX Series device
  5. E
    vSRX

Correct Answer:
ADE
Reference:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/secuirty-cos-based-ipsec-vpns.html

Question #12
You are asked to configure a new SRX Series CPE device at a remote office. The device must participate in forwarding MPLS and IPsec traffic.
Which two statements are true regarding this implementation? (Choose two.)
  1. A
    Host inbound traffic must not be processed by the flow module
  2. B
    Host inbound traffic must be processed by the flow module
  3. C
    The SRX Series device can process both MPLS and IPsec with default traffic handling
  4. D
    A firewall filter must be configured to enable packet mode forwarding

Correct Answer:
AD
Reference:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-packet-based-forwarding.html

Question #13
Which three roles or protocols are required when configuring an ADVPN? (Choose three.)
  1. A
    OSPF
  2. B
    shortcut partner
  3. C
    shortcut suggester
  4. D
    IKEv1
  5. E
    BGP

Correct Answer:
ABC
Reference:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discovery-vpns.html

Question #14
You must troubleshoot ongoing problems with IPsec tunnels and security policy processing. Your network consists of SRX340s and SRX5600s.
In this scenario, which two statements are true? (Choose two.)
  1. A
    IPsec logs are written to the kmd log file by default
  2. B
    IKE logs are written to the messages log file by default
  3. C
    You must enable data plane logging on the SRX340 devices to generate security policy logs
  4. D
    You must enable data plane logging on the SRX5600 devices to generate security policy logs

Correct Answer:
AD

Question #15
Click the Exhibit button.

You are implementing a new branch site and want to ensure Internet traffic is sent directly to your ISP and other traffic is sent to your company headquarters. You have configured filter-based forwarding to accomplish this objective. You verify proper functionality using the outputs shown in the exhibit.
Which two statements are true in this scenario? (Choose two.)
  1. A
    The session utilizes one routing instance
  2. B
    The ge-0/0/5 and ge-0/0/1 interfaces must reside in a single security zone
  3. C
    The ge-0/0/5 and ge-0/0/1 interfaces can reside in different security zones
  4. D
    The session utilizes two routing instances

Correct Answer:
AC

Previous Questions Next Questions

All Pages