JN0-696 Exam Questions
75 real JN0-696 exam questions with expert-verified answers and explanations. Page 2 of 2.
- Question #51Troubleshooting Zones and Screen Options
Click the Exhibit button. A customer has a problem connecting to an SRX Series device from the untrust zone using SSH only. Referring to the exhibit, which action will solve the pr...
host-inbound-trafficSSHuntrust zonesecurity zones - Question #52
You are asked to review the logs on an SRX Series device. You issue the command shown below. [edit] root# run show log messages You receive the following log message: ... Aug 26 20...
- Question #53
Click the Exhibit button. You are troubleshooting an IPsec VPN which is not establishing. Which two issues would cause the message shown in the exhibit? (Choose two.)
- Question #54
Click the Exhibit button. You configured a route-based VPN, but users complain that they cannot pass traffic through it. Referring to the exhibit, what is causing the problem?
- Question #55Troubleshooting IPsec VPNs
Click the Exhibit button. You are troubleshooting a connectivity issue between a remote branch office and your company headquarters using SRX Series devices. Referring to the exhib...
IPsec tunnelflappingbranch connectivitytunnel stability - Question #56Troubleshooting Security Policies
You recently installed a new webserver which resides in the DMZ zone of an SRX Series device. However, the server is not accessible from any host in the Untrust zone. Which two sta...
DMZsecurity policyaddress bookinter-zone traffic - Question #57Troubleshooting Advanced Security Services
Network users mention that they are having an issue downloading files. You determine that the issue began after you configured the full file-based antivirus feature on your SRX Ser...
antivirusUTMintelligent prescreeningfile scanning performance - Question #58Troubleshooting Advanced Security Services
You are troubleshooting UTM Web filtering for a customer on an SRX Series device. Users are able to access HTTPS websites; however, you realize that those URLs have been blocked on...
UTM web filteringHTTPSURL filteringblacklist whitelist - Question #59Troubleshooting High Availability (HA)
Click the Exhibit Button. The node1 device of your chassis cluster experiences a power failure. It boots using the backup partition, while node0 remains on the primary partition. H...
chassis clusterpreemptnode failoverHA status - Question #60Troubleshooting High Availability (HA)
Click the Exhibit button. A customer wants to create a chassis cluster with the SRX Series devices shown in the exhibit. The customer is not able to create the chassis cluster. In...
chassis clustersoftware versionHA requirements - Question #61Troubleshooting IPsec VPNs
Users begin complaining that they are not able to access resources. You start your troubleshooting by reviewing the security associations. Which two methods would you use to troubl...
IKE security associationsIPsec monitoringJ-Webshow commands - Question #62
Click the exhibit button. Your customer has indicated that their VPN is down. Referring to the exhibit, what is the problem? A. The IKE IDs are mismatched.
- Question #63Troubleshooting Advanced Security Services
Click the Exhibit button. A customer updated their attack database to the current version and performed some changes to the configuration. When the customer tried to commit the cha...
IDPattack databasecommit errorpolicy configuration - Question #64Troubleshooting High Availability (HA)
Click the Exhibit button. You recently configured a chassis cluster between two branch SRX Series devices and realize that the cluster is not functional, with node device status lo...
chassis clustersoftware versionhardware compatibilitynode status - Question #65Troubleshooting Security Policies
LAN 1 and LAN 2 are experiencing network communication problems. While troubleshooting, you add one address book to a security policy. You must verify that the address book was add...
address booksecurity policyshow commandspolicy verification - Question #66Troubleshooting Security Policies
While attempting to commit a configuration for a new address book, you received the error message shown below. Zone specific address books are not allowed when there are global add...
address bookcommit errorglobal address bookzone address book - Question #67Troubleshooting Security Platform and Management
Click the Exhibit button. A customer wants to commit a configuration but receives the error shown in the exhibit. What would solve the problem?
commit errorconfiguration validationSRX platformconstraint check - Question #68
Click the Exhibit button. You are asked to troubleshoot why users outside of the network cannot access internal resources. The network administrator says that NAT is configured on...
- Question #69Troubleshooting Network Address Translation (NAT)
Click the exhibit button. You recently installed two new internal webservers. You configure destination NAT on your SRX Series device so that external users will have access to int...
destination NATproxy ARPsecurity zonewebserver access - Question #70Troubleshooting Zones and Screen Options
Click the Exhibit button. A customer configured DHCP relay. After committing the configuration, the DHCP server does not provide addresses and you suspect that a configuration is m...
DHCP relayhost-inbound-trafficsecurity zonessecurity policies - Question #71Troubleshooting AppSecure
You are deploying AppFW in an SRX Series device and implemented the application signature shown below: junos:FACEBOOK-ACCESS Traffic is going through the correct policy zone and th...
AppFWapplication signatureFacebook blockingblacklist - Question #72Troubleshooting Advanced Security Services
Click the Exhibit button. You are implementing UTM on an SRX Series device to block the advertisements and special events URL category, however, traffic for those categories is sti...
UTMweb filteringjuniper-enhancedURL category - Question #73Troubleshooting IPsec VPNs
Click the Exhibit button. A customer has requested that you set up a dynamic VPN to allow users to reach the internal network. After running the configuration shown in the exhibit,...
dynamic VPNaddress poolIP conflictsubnet configuration - Question #74Troubleshooting AppSecure
You have deployed AppID on your SRX Series device. You want to block all HTTP connections. However, there is a packet-monitoring device that shows the SRX Series device is still al...
AppIDapplication identificationHTTP blockingsession behavior - Question #75Troubleshooting Advanced Security Services
Click the Exhibit button. Your customer suspects that their antispam software is not functioning properly. You determine that their SRX Series device is not receiving any hits on t...
antispamUTMspam countertrusted relay