JN0-696 Exam Questions

Click the Exhibit button. You are troubleshooting a communication problem between a trust zone and an untrust zone in the network, where PC-1 cannot ping PC-2. Referring to the exh...

Click the Exhibit button. Referring to the exhibit, PC-1 is unable to ping Server-1. Traffic from PC- 1 to Server-1 arrives on interface fe-0/0/3 but return traffic from Server-1 t...

user@host> show security flow session interface ge-0/0/10.0 Session ID. 29, Policy name: to- infrastructure/4, Timeout: 1250, Valid Resource information : FTP ALG, 1, 0 In: 10.1.1....

user@host> show configuration security policies from-zone engineering to-zone hr policy new-policy { match { source-address any; destination-address server1; application hr-data-fe...

user@host> show security flow session ... Session ID. 41, Policy name: allow/5, Timeout: 20, Valid In: 172.168.66.143/43886 --> 192.168.100.1/5000;tcp, If: ge-0/0/1.0, Pkts: 1, Byt...

user@host> show log ibgp-trace ... Jun 12 10:21:08 10:21:08.367627:CID- 0:RT:192.168.2.1/49170->192.168.1.1/179;6> matched filter ibgp-traffic: Jun 12 10:21:08 10:21:08.367747:CID-...

user@host> show configuration ... security { nat { destination { pool server { address 10.100.100.1/32 port 5555; } rule-set rule1 { from zone UNTRUST; rule 1 { match { destination...

user@host> show log flow.log Jun 12 20:00:45 host clear-log[ ]: logfile cleared Jun 12 20:01:10 20:01:10.412643:CID- 0:RT:172.23.1.20/2526->10.3.202.56/443;6> matched filter to_htt...

Click the Exhibit button. Your company has a Web server in the trust zone. You configure a NAT rule to allow Internet users from the untrust zone to access this Web server. Interne...

user@R1> show security ike security-associations user@R1> show security zones Security zone: trust Send reset for non-SYN session TCP packets: Off Policy configurable: Yes Interfac...

user@R1> show log ike-trace Jun 13 07:45:10 ikev2_packet_v1_start: Passing IKE v1.0 packet to IKEv1 library Jun 13 07:45:10 ike_get_s

user@SRX-1> show configuration security ike traceoptions { file ike-trace; flag all; } policy juniper { proposal-set standard; pre-shared-key ascii-text "$ $ znCO hKMXtuMX - gTz ";...

[edit] user@SRX-1# show security ike traceoptions file ike-trace; flag all; [edit] user@SRX-1# show security ipsec traceoptions flag all; user@SRX-1> show log ike-trace ... Jun 13...

Click the Exhibit button. You are asked to troubleshoot a new IPsec VPN that is not establishing. You do not receive any output from the show security ike security-associations com...

user@host> show log ike-test ... Jun 13 10:36:52 ike_st_i_cr: Start Jun 13 10:36:52 ike_st_i_cert: Start Jun 13 10:36:52 ike_st_i_private: Start Jun 13 10:36:52 ike_st_o_iD. Start...

Click the Exhibit button. You have created a new VPN tunnel to your partner's site but IKE Phase 1 is not coming up. You check the trace log and find the following log message: Jun...

user@host> request services application-identification application copy junos:AIM-HTTP-API error: Can not commit to junos configure DB. --------------------------------------------...

Apr 27 19:11:09 company-fw init: low_mem_signal_processes: send signal 16 to routing Apr 27 19:11:09 company-fw /kernel: KERNEL_MEMORY_CRITICAL: System low on free memory, notifyin...

[edit security utm] user@host# show custom-objects { url-pattern { blocklist { } acceptlist { } } custom-url-category { blacklist { value blocklist; } whitelist { value acceptlist;...

user@host> show configuration security utm custom-objects { url-pattern { block-juniper { value *.spammer.com; } } custom-url-category { blacklist { value block-juniper; } } } feat...

{hold:node0} user@host1> show chassis cluster status Cluster ID. 1 Node Priority Status Preempt Manual failover Redundancy group: 0 , Failover count: 0 node0 1 hold no no node1 0 l...

{primary:node0} user@host> show configuration chassis | display inheritance cluster { redundancy-group 1 { node 0 priority 200; node 1 priority 100; interface-monitor { ge-0/0/12 w...

Click the Exhibit button. There is an existing chassis cluster connected to the corporate network 192.168.1.0/24. You are asked to connect another department to this VLAN. To achie...

You are having problems establishing an IPsec tunnel between two SRX Series devices. What are two explanations for this problem? (Choose two.)

Two SRX Series devices are having problems establishing an IPsec VPN session. One of the devices has a firewall filter applied to its gateway interface that rejects UDP traffic. Wh...

Your SRX Series device has the following configuration: user@host> show security policies ... Policy: my-policy, State: enabled, Index: 5, Sequence number: 1 Source addresses: any...

You want to allow remote users using PCs running Windows 7 to access the network using an IPsec VPN. You implement a route-based hub-and-spoke VPN; however, users report that they...

You notice that the secondary node of a chassis cluster has become disabled. What caused this behavior?

Users at a branch office report that they cannot reach an internal Web server. The users connect through a single SRX Series device to reach the Web server. A security policy has b...

You are asked to troubleshoot a user communication problem. Users connected to the Trust zone cannot communicate with other devices connected to the same zone. These users are able...

You have implemented AppTrack on your SRX Series device to track YouTube streaming video usage in your network. However, many of the YouTube videos that your users are watching are...

While attempting to set up IDP on an SRX Series device, the IDP attack database fails to download. What is one reason for this behavior?

When attempting to delete IDP policies and configurations from an SRX Series device, a user enters these configuration commands: Delete security idp Commit However, after the commi...

You recently configured the antivirus feature profile on your Junos device. The security policy is sending traffic for antivirus scanning. However, the traffic is being blocked and...

You are troubleshooting a problem on your Junos device where the antispam SBL server is no longer filtering known spam hosts. You notice that local list antispam filtering is still...

In preparation for future expansion, a user decides to configure a stand-alone SRX Series device for chassis-clustering mode. The user enters the command set chassis cluster cluste...

You are using logical systems to segregate customers. You have a requirement to enable communication between the logical systems. What are two ways to accomplish this goal? (Choose...

You are asked to merge the corporate network with the network from a recently acquired company. Both networks use the same private IPv4 address space (172.25.126.0/24). An SRX devi...

Which statement is true regarding dual-stack lite?

Which two statements are true regarding DNS doctoring? (Choose two.)

Click the Exhibit button. You are implementing a high availability chassis cluster on an SRX Series device. You would like to manage both devices through the J-Web utility. However...

A customer downloaded and installed the IDP policy template. After copying the recommended templates and creating the needed policy, the customer deleted the templates. After the c...

You have an SRX branch device with two ISP connections. During analysis of the traffic, you notice that traffic from internal users to ISP 1 are replied to by ISP 2. Which two conf...

You are asked to update the IDP signature database. After you issue the request security IDP security-package download command, you need to monitor the process. Which command would...

You are requested to verify that the UTM service is running on the SRX Series device. Which command will accomplish this task?

Click the Exhibit button. You are reviewing the status of a high-end SRX Series chassis cluster and notice that some interfaces have error messages. Referring to the exhibit, which...

Click the Exhibit button. A customer is using a destination NAT to a remote webserver, but the configuration is not working. Referring to the exhibit, which configuration changes w...

You are asked to troubleshoot a number of dynamic VPN connections on an SRX Series device. Which three statements are correct? (Choose three.)

Click the Exhibit button. Your customer reports that user1 is not able to access the protected resources on a dynamic VPN. To troubleshoot the connection issue between user1 and th...

Click the Exhibit button. A customer created a security policy and is not receiving any logs from permitted sessions, you are asked to obtain the logs for the customer. Which param...