Pass Your Junos Security JN0-635 Exam on Jun 06, 2022 with 90 Questions [Q48-Q62]

QUESTION 48
You have designed the firewall filter shown in the exhibit to limit SSH control traffic to yours SRX Series device without affecting other traffic.
Which two statement are true in this scenario? (Choose two.)

QUESTION 49
You are not able to activate the SSH honeypot on the all-in-one Juniper ATP appliance.
What would be a cause of this problem?

QUESTION 50
Which three types of peer devices are supported for CoS-based IPsec VPNs? (Choose three.)

QUESTION 51
You have noticed a high number of TCP-based attacks directed toward your primary edge device. You are asked to configure the IDP feature on your SRX Series device to block this attack.
Which two IDP attack objects would you configure to solve this problem? (Choose two.)

QUESTION 52
Click the Exhibit button.

A user reports trouble when using SSH to a server outside your organization. The traffic traverses an SRX Series device that is performing NAT and applying security policies.
Referring to the exhibit, which configuration will allow you to see the bidirectional flow through the SRX Series device?
A)

B)

C)

D)

QUESTION 53
Click the Exhibit button.

Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)

QUESTION 54
Click the Exhibit button.

You have recently committed the IPS policy shown in the exhibit. When evaluating the expected behavior, you notice that you have a session that matches all the rules in your IPS policy.
In this scenario, which action would be taken?

QUESTION 55
Click the Exhibit button.

Referring to the exhibit, which statement is true?

QUESTION 56
Click the Exhibit button.

A user is trying to reach a company’s website, but the connection errors out. The security policies are configured correctly.
Referring to the exhibit, what is the problem?

QUESTION 57
When would you use the port-overloading-factor 1 setting?

QUESTION 58
You configured a security policy permitting traffic from the trust zone to the DMZ zone, inserted the new policy at the top of the list, and successfully committed it to the SRX Series device. Upon monitoring, you notice that the hit count does not increase on the newly configured policy.
In this scenario, which two commands would help you to identify the problem? (Choose two.)

QUESTION 59
Click the Exhibit button.

A host is unable to communicate with a webserver. Referring to the exhibit, which statement is correct?

QUESTION 60
Which two modes are supported on Juniper Sky ATP? (Choose two.)

QUESTION 61
Click the Exhibit button.

Your company has purchased a competitor and now must connect the new network to the existing one. The competitor’s gateway device is receiving its ISP address using DHCP. Communication between the two sites must be secured; however, obtaining a static public IP address for the new site gateway is not an option at this time. The company has several requirements for this solution:
* A site-to-site IPsec VPN must be used to secure traffic between the two sites;
* The IKE identity on the new site gateway device must use the hostname option; and
* Internet traffic from each site should exit through its local Internet connection.
The configuration shown in the exhibit has been applied to the new site’s SRX, but the secure tunnel is not working.
In this scenario, what configuration change is needed for the tunnel to come up?

QUESTION 62
Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)