[Apr 30, 2023] JN0-636 Test Engine files, JN0-636 Dumps PDF [Q56-Q75] : Exam for engine : http://blog.test4engine.com

QUESTION 56
Exhibit

You have configured the SRX Series device to switch packets for multiple directly connected hosts that are within the same broadcast domain However, the traffic between two hosts in the same broadcast domain are not matching any security policies Referring to the exhibit, what should you do to solve this problem?

You must change the global mode to security switching mode.

You must change the global mode to security bridging mode

You must change the global mode to transparent bridge mode.

You must change the global mode to switching mode.

QUESTION 57
You issue the command shown in the exhibit.
Which policy will be active for the identified traffic?

Policy p4

Policy p7

Policy p1

Policy p12

QUESTION 58
Exhibit

The exhibit shows a snippet of a security flow trace.
In this scenario, which two statements are correct? (Choose two.)

This packet arrived on interface ge-0/0/4.0.

Destination NAT occurs.

The capture is a packet from the source address 172.20.101.10 destined to 10.0.1.129.

An existing session is found in the table.

QUESTION 59
Exhibit

You configure Source NAT using a pool of addresses that are in the same subnet range as the external ge-0/0/0 interface on your vSRX device. Traffic that is exiting the internal network can reach external destinations, but the return traffic is being dropped by the service provider router.
Referring to the exhibit, what must be enabled on the vSRX device to solve this problem?

STUN

Proxy ARP

Persistent NAT

DNS Doctoring

QUESTION 60
Exhibit

Referring to the exhibit, an internal host is sending traffic to an Internet host using the 203.0.113.1 reflexive address with source port 54311.
Which statement is correct in this situation?

Only the Internet host that the internal host originally communicated with can initiate traffic to reach the internal host using the 203.0.113.1 address, source port 54311, and a random destination port.

Only the Internet host that the internal host originally communicated with can initiate traffic to reach the internal host using the 203.0 113.1 address, a random source port, and destination port 54311.

Any host on the Internet can initiate traffic to reach the internal host using the 203.0.113.1 address, source port 54311, and a random destination port.

Any host on the Internet can initiate traffic to reach the internal host using the 203.0.113.1 address, a random source port, and destination port54311.

QUESTION 61
Exhibit

You are using ATP Cloud and notice that there is a host with a high number of ETI and C&C hits sourced from the same investigation and notice that some of the events have not been automatically mitigated.
Referring to the exhibit, what is a reason for this behavior?

The C&C events are false positives.

The infected host score is globally set bellow a threat level of 5.

The infected host score is globally set above a threat level of 5.

The ETI events are false positives.

QUESTION 62
Exhibit

Referring to the exhibit, which two statements are true about the CAK status for the CAK named “FFFP”? (Choose two.)

CAK is not used for encryption and decryption of the MACsec session.

SAK is successfully generated using this key.

CAK is used for encryption and decryption of the MACsec session.

SAK is not generated using this key.

QUESTION 63
Exhibit

You are using ATP Cloud and notice that there is a host with a high number of ETI and C&C hits sourced from the same investigation and notice that some of the events have not been automatically mitigated.
Referring to the exhibit, what is a reason for this behavior?

The C&C events are false positives.

The infected host score is globally set bellow a threat level of 5.

The infected host score is globally set above a threat level of 5.

The ETI events are false positives.

QUESTION 64
Exhibit

Referring to the exhibit, a spoke member of an ADVPN is not functioning correctly.
Which two commands will solve this problem? (Choose two.)
A)

B)

C)

D)

Option A

Option B

Option C

Option D

QUESTION 65
Exhibit

The highlighted incident (arrow) shown in the exhibit shows a progression level of “Download” in the kill chain.
What are two appropriate mitigation actions for the selected incident? (Choose two.)

Immediate response required: Block malware IP addresses (download server or CnC server)

Immediate response required: Wipe infected endpoint hosts.

Immediate response required: Deploy IVP integration (if configured) to confirm if the endpoint has executed the malware and is infected.

Not an urgent action: Use IVP to confirm if machine is infected.

QUESTION 66
You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restricted to the VLANs from which they originate.
Which configuration accomplishes these objectives?
A)

B)

C)

D)

Option A

Option B

Option C

Option D

QUESTION 67
You are required to deploy a security policy on an SRX Series device that blocks all known Tor network IP addresses. Which two steps will fulfill this requirement? (Choose two.)

Enroll the devices with Juniper ATP Appliance.

Enroll the devices with Juniper ATP Cloud.

Enable a third-party Tor feed.

Create a custom feed containing all current known MAC addresses.

QUESTION 68
Which three type of peer devices are supported for Cos-Based IPsec VPN?

High-end SRX Series device

cSRX

vSRX

Branch-end SRX Series devics

QUESTION 69
Exhibit

The highlighted incident (arrow) shown in the exhibit shows a progression level of “Download” in the kill chain.
What are two appropriate mitigation actions for the selected incident? (Choose two.)

Immediate response required: Block malware IP addresses (download server or CnC server)

Immediate response required: Wipe infected endpoint hosts.

Immediate response required: Deploy IVP integration (if configured) to confirm if the endpoint has executed the malware and is infected.

Not an urgent action: Use IVP to confirm if machine is infected.

QUESTION 70
You have designed the firewall filter shown in the exhibit to limit SSH control traffic to yours SRX Series device without affecting other traffic.
Which two statement are true in this scenario? (Choose two.)

The filter should be applied as an output filter on the loopback interface.

Applying the filter will achieve the desired result.

Applying the filter will not achieve the desired result.

The filter should be applied as an input filter on the loopback interface.

QUESTION 71
You want to identify potential threats within SSL-encrypted sessions without requiring SSL proxy to decrypt the session contents. Which security feature achieves this objective?

infected host feeds

encrypted traffic insights

DNS security

Secure Web Proxy

QUESTION 72
Exhibit

Which two statements are correct about the output shown in the exhibit? (Choose two.)

The packet is silently discarded.

The packet is part of an existing session.

The packet is part of a new session.

The packet is explicitly rejected.

QUESTION 73
Exhibit

Referring to the exhibit, which type of NAT is being performed?

Static NAT

Destination NAT

Persistent NAT

Source NAT

QUESTION 74
Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)

The SRX-1 device can use the Proxy__Nodes feed in another security policy.

You can use the Proxy_Nodes feed as the source-address and destination-address match criteria of another security policy on a different SRX Series device.

The SRX-1 device creates the Proxy_wodes feed, so it cannot use it in another security policy.

You can only use the Proxy_Node3 feed as the destination-address match criteria of another security policy on a different SRX Series device.

QUESTION 75
Exhibit

You are trying to configure an IPsec tunnel between SRX Series devices in the corporate office and branch1. You have committed the configuration shown in the exhibit, but the IPsec tunnel is not establishing.
In this scenario, what would solve this problem.

Add multipoint to the st0.0 interface configuration on the branch1 device.

Change the IKE proposal-set to compatible on the branch1 and corporate devices.

Change the local identity to inet advpn on the branch1 device.

Change the IKE mode to aggressive on the branch1 and corporate devices.