Download Juniper.JN0-633.PracticeTest.2018-08-17.99q.tqb
| Vendor: | Juniper |
| Exam Code: | JN0-633 |
| Exam Name: | Juniper Networks Certified Professional Security (JNCIP-SEC) |
| Date: | Aug 17, 2018 |
| File Size: | 3 MB |
Demo Questions
Question 1
You must configure a central SRX device connected to two branch offices with overlapping IP address space. The branch office connections to the central SRX device must reside in separate routing instances. Which two components are required? (Choose two.)
- virtual routing instance
- forwarding instance
- static NAT
- persistent NAT
Correct answer: AC
Explanation:
Reference : http://kb.juniper.net/InfoCenter/index?page=content&id=KB21286 Reference : http://kb.juniper.net/InfoCenter/index?page=content&id=KB21286
Question 2
You are attempting to establish an IPsec VPN between two SRX devices. However, there is another device between the SRX devices that does not pass traffic that is using UDP port 4500.
How would you resolve this problem?
- Enable NAT-T.
- Disable NAT-T.
- Disable PAT.
- Enable PAT.
Correct answer: B
Explanation:
NAT-T also uses UDP port 4500 (by default) rather than the standard UDP. So disabling NAT-T will resolve this issue. Reference : https://www.google.co.in/url?sa=t&rct=j&q=&esrc=s&source=web&cd=10&cad=rja&ved=0CHsQFjAJ&url=http%3A%2F %2Fchimera.labs.oreilly.com%2Fbooks %2F1234000001633%2Fch10.html&ei=NZrtUZHHO4vJrQezmoCwAw&usg=AFQjCNGU05bAtnFu1vXNg ssixHtCBoNBnw&sig2=iKzzPNQqiH2xrsjveXIleA&bvm=bv.49478099,d.bmk NAT-T also uses UDP port 4500 (by default) rather than the standard UDP. So disabling NAT-T will resolve this issue.
Reference : https://www.google.co.in/url?
sa=t&rct=j&q=&esrc=s&source=web&cd=10&cad=rja&ved=0CHsQFjAJ&url=http%3A%2F %2Fchimera.labs.oreilly.com%2Fbooks
%2F1234000001633%2Fch10.html&ei=NZrtUZHHO4vJrQezmoCwAw&usg=AFQjCNGU05bAtnFu1vXNg ssixHtCBoNBnw&sig2=iKzzPNQqiH2xrsjveXIleA&bvm=bv.49478099,d.bmk
Question 3
Given the following session output:
Session ID. , Policy namE. default-policy-00/2, StatE. Active, Timeout: 1794, Valid
In: 2001:660:1000:8c00::b/1053 --> 2001:660:1000:9002::aafe/80;tcp, IF. reth0.0, Pkts: 4, Bytes: 574
Out: 192.168.203.10/80 --> 192.168.203.1/24770;tcp, IF. reth1.0, Pkts: 3, Bytes:
Which statement is correct about the security flow session output?
- This session is about to expire.
- NAT64 is used.
- Proxy NDP is used for this session.
- The IPv4 Web server runs services on TCP port 24770.
Correct answer: B
Explanation:
Reference : http://kb.juniper.net/InfoCenter/index?page=content&id=KB22391 Reference : http://kb.juniper.net/InfoCenter/index?page=content&id=KB22391
