Free JN0-635 Exam braindumps download (JN0-635 exam dumps Free)

QUESTION: 11

Which three types of peer devices are supported for CoS-based IPsec VPNs? (Choose three.)

branch SRX Series device
third-party device
cSRX
high-end SRX Series device
vSRX

Answer(s): A,D,E

Reference:

https://www.juniper.net/documentation/en_US/junos/topics/topic-map/secuirty-cos-based-ipsec-vpns.html

You are asked to configure a new SRX Series CPE device at a remote office. The device must participate in forwarding MPLS and IPsec traffic.

Which two statements are true regarding this implementation? (Choose two.)

Host inbound traffic must not be processed by the flow module
Host inbound traffic must be processed by the flow module
The SRX Series device can process both MPLS and IPsec with default traffic handling
A firewall filter must be configured to enable packet mode forwarding

Answer(s): A,D

Reference:

https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-packet-based-forwarding.html

Show Answer Next Question

QUESTION: 13

Which three roles or protocols are required when configuring an ADVPN? (Choose three.)

OSPF
shortcut partner
shortcut suggester
IKEv1
BGP

Answer(s): A,B,C

Reference:

https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-auto-discovery-vpns.html

Show Answer Next Question

QUESTION: 14

You must troubleshoot ongoing problems with IPsec tunnels and security policy processing. Your network consists of SRX340s and SRX5600s.

In this scenario, which two statements are true? (Choose two.)

IPsec logs are written to the kmd log file by default
IKE logs are written to the messages log file by default
You must enable data plane logging on the SRX340 devices to generate security policy logs
You must enable data plane logging on the SRX5600 devices to generate security policy logs

Answer(s): A,D

Show Answer Next Question

QUESTION: 15

Click the Exhibit button.

You are implementing a new branch site and want to ensure Internet traffic is sent directly to your ISP and other traffic is sent to your company headquarters. You have configured filter-based forwarding to accomplish this objective. You verify proper functionality using the outputs shown in the exhibit.

Which two statements are true in this scenario? (Choose two.)

The session utilizes one routing instance
The ge-0/0/5 and ge-0/0/1 interfaces must reside in a single security zone
The ge-0/0/5 and ge-0/0/1 interfaces can reside in different security zones
The session utilizes two routing instances

Answer(s): A,C

Show Answer Next Question

Free JN0-635 Exam Braindumps
Security, Professional (JNCIP-SEC) Questions 11–15 (page: 4)

QUESTION: 11

Reference:

QUESTION: 12

Reference:

QUESTION: 13

Reference:

QUESTION: 14

QUESTION: 15

Free JN0-635 Exam Braindumps Security, Professional (JNCIP-SEC) Questions 11–15 (page: 4)

QUESTION: 11

Reference:

QUESTION: 12

Reference:

QUESTION: 13

Reference:

QUESTION: 14

QUESTION: 15

Free JN0-635 Exam Braindumps
Security, Professional (JNCIP-SEC) Questions 11–15 (page: 4)