JN0-632 Exam Questions
165 real JN0-632 exam questions with expert-verified answers and explanations. Page 3 of 4.
- Question #106
How many components can a compound attack object contain?
- Question #107
You want out-of-band management traffic to be separated from the transit traffic going through an SRX chassis cluster. Which two must you implement to meet this requirement? (Choos...
- Question #108
You have configured several new security policies on your SRX Series device, and they are ready to be committed. The device is running in a live network and you are concerned that...
- Question #109
What can cause a node in an SRX Series chassis cluster to be in the disabled state?
- Question #110
Click the exhibit. The exhibit contains the full routing-instances and interface configuration present on your SRX Series device. Customer A hosts are attached to the ge-0/0/3 inte...
- Question #111
A security alert has been issued for an application running on your network that exploits a buffer overflow to compromise the application. The security alert specifies that initial...
- Question #112
You are asked to configure an IPsec tunnel to securely connect from the headquarters office to a remote office. You are required to use ESP and to disable NAT traversal between off...
- Question #113
You are concerned about the latency introduced in processing packets through the IPS signature database and want to configure the SRX Series device to minimize latency. You decide...
- Question #114
Juniper JN0-632 Exam You create a custom attack signature with the following criteria: -- HTTP Request: -- Pattern: *\x<404040...40 -- Direction Client to Server Which client reque...
- Question #115
Click the Exhibit button. In the exhibit, what does the configured screen do?
- Question #116
You must configure a site-to-site VPN connection between your company and a business partner. The security policy of your organization states that the source of incoming traffic mu...
- Question #117
Click the Exhibit button. In the exhibit, Customer A and Customer B connect to the same SRX Series device. ISP1 and ISP2 are also directly connected to the SRX device. Customer A's...
- Question #118
Company A and Company B are using the same IP address space. You are using static NAT to provide dual translation between the two networks. Which two additional requirements are ne...
- Question #119
Your company is deploying a new WAN that uses transport over a private network infrastructure to provide an any-to-any topology. Your manager is concerned about the confidentiality...
- Question #120
Click the Exhibit button. Senior management reports that your company's network is being attacked by hackers exploiting a recently announced vulnerability. The attack is not being...
- Question #121
You obtained a license file from Juniper Networks for the SRX Series Services Gateway IPS feature set. You want to install the license onto the SRX Series device. Which statement i...
- Question #122
You have been asked to configure a signature to block an attack released by a security vulnerability reporting agency. Which two characteristics of the attack must you understand t...
- Question #123
In a group VPN the members rekey with the server using the Unicast PUSH method. This rekey mechanism is protected by which secure channel?
- Question #124
Click the Exhibit button. A user complains that they cannot reach a destination host using Telnet. The user expresses concern that the SRX Series device is blocking the connection...
- Question #125
You have a problem with an FTP session that will not establish through your SRX240 device. You confirmed that routing and security policies are correct. You want to capture packets...
- Question #126
You have been asked to add a dynamic VPN to your SRX650. This dynamic VPN must be able to support five users at the same time. What are two primary requirements? (Choose two.)
- Question #127
Click the Exhibit button. The exhibit shows a configuration for two IPSec tunnels. The tunnel ipsec-vpn-primary is being used as the primary tunnel, and the tunnel ipsec-vpn-backup...
- Question #128
Juniper JN0-632 Exam Click the Exhibit button. You are troubleshooting a new IPSec VPN tunnel that is failing to establish an IKE security association between SRX Series devices. Y...
- Question #129
Click the Exhibit button. In the exhibit, two SRX240 devices form a chassis cluster. Node 0 is primary for RG 1, and interface monitoring is configured to fail primacy over to Node...
- Question #130
You want to implement an IPS rule base action in which matching traffic is dropped. Which configuration parameter meets this requirement?
- Question #131
Which two protocols are supported by Application Layer Gateways (ALGs) on SRX Series devices? (Choose two.)
- Question #132
You are troubleshooting a problem with a chassis cluster, and you issue the show log jsrpd command. What information would be helpful in the generated output? (Choose two)
- Question #133
You are having problems with SYN flood attacks against your network. You administered the TCP syn-flood options on your SRX device to block these attacks, but internal hosts are st...
- Question #134
You have been asked to secure your network from as many network reconnaissance activities as possible. Which three screens would be helpful in blocking these types of activities? (...
- Question #135
Your company is in the process of deploying a VPN network 10 connects its sites Traffic will Juniper JN0-632 Exam predominantly access resources at the central site. However, on oc...
- Question #136
Click the Exhibit button. Compare the two outputs shown in the exhibit. Which two statements are correct about VPN monitoring? (Choose two.)
- Question #137
You recently added NAT in your environment and now users are complaining about not being able to access the Internet. Which two parameters would you configure to verify that NAT is...
- Question #138
Click the Exhibit button. Referring to the exhibit, which parameter can be applied under the destination-address hierarchy?
- Question #139
Which statement accurately describes an idle scan?
- Question #140
You must protect your network against Layer 4 scans. Which two actions help you achieve this objective? (Choose two)
- Question #141
Click the Exhibit button. Referring to the exhibit, which two statements are true? (Choose two)
- Question #142
You have been asked to design and deploy a VPN-based backup network for your enterprise. Your network is currently configured across a single OSPF Area 0. All the VPN termination p...
- Question #143
For RG 1, Node 0 has priority 200; Node 1 has priority 100. Preempt has been configured. Node 0 has been rebooted; therefore, Node 1 is primary for RG 1. What happens when Node 0 c...
- Question #144
Click the Exhibit button. Which statement is true regarding the session displayed in the exhibit?
- Question #145
Click the Exhibit button. The NHTB configuration excerpt shown in the exhibit is applied on an SRX Series device that is a hub in a hub-and-spoke VPN. Which statement is true about...
- Question #146
Click the Exhibit button. In the exhibit, which two commands should you use to ping 10.1.1.100 from me SRX Series device's command line? (Choose two) Juniper JN0-632 Exam
- Question #147
Your company has VPNs that connect to other companies. The company wants to use certificates with a recognized third-patty certificate authority. Which two steps are required to us...
- Question #148
Your company wants to deploy IPv6. The deployment on core routers has been completed. You now must enable your firewalls with the new protocol, but you must configure the SRX Serie...
- Question #149
You have a VoIP application that requires external sessions to be initiated into your environment. The internal host has not sent an initial packet to the external host's reflexive...
- Question #150
You want to implement a VPN on your SRX device that will use certificates to authenticate with the peer gateway. You plan to allow certificates from any certificate authority. Whic...
- Question #151
A security alert has been issued for an application running on your network that exploits a buffer overflow to compromise the application. The security alert specifies that client-...
- Question #152
Click the Exhibit button. Given the exhibit, which type of NAT is implemented? Juniper JN0-632 Exam
- Question #153
After implementing a chassis cluster for active/active clustering, you have identified a congestion issue with traffic traversing the data link between the two nodes. Which solutio...
- Question #154
In which order are the stages of an attack?
- Question #155
Which three scans can an attacker use to probe your network for open TCP ports? (Choose three.)