JN0-635 Online Practice Questions and Answers

You have set up Security Director with Policy Enforcer and have configured 12 third-party feeds and a Sky ATP feed. You are also injecting 16 feeds using the available open API. You want to add another compatible feed using the available open API, but Policy Enforcer is not receiving the new feed.

What is the problem in this scenario?

A. You must wait 48 hours for the feed to update

B. You cannot add more than 16 feeds through the available open API

C. You have reached the maximum limit of 29 total feeds

D. You cannot add more than 16 feeds with the available open API

Which three roles or protocols are required when configuring an ADVPN? (Choose three.)

A. OSPF

B. shortcut partner

C. shortcut suggester

D. IKEv1

E. BGP

You are trying to get a SSH honeypot set up on a Juniper ATP Appliance collector. The collector is running on hardware with two physical interfaces and two physical CPU cores. The honeypot feature is not working.

Which statement is true in this scenario?

A. The collector must have at least three physical interfaces

B. The collector must have at least four physical cores

C. The collector must have at least four physical interfaces

D. The collector must have at least six physical cores

Click the Exhibit button.

A user reports trouble when using SSH to a server outside your organization. The traffic traverses an SRX Series device that is performing NAT and applying security policies.

Referring to the exhibit, which configuration will allow you to see the bidirectional flow through the SRX Series device?

A. Option A

B. Option B

C. Option C

D. Option D

In which two ways are tenant systems different from logical systems? (Choose two.)

A. Tenant systems have higher scalability than logical systems

B. Tenant systems have less scalability than logical systems

C. Tenant systems have fewer routing features than logical systems

D. Tenant systems have more routing features than logical systems

In a Juniper ATP Appliance, what would be a reason for the mitigation rule to be in the failed-remove state?

A. The Juniper ATP Appliance received a commit error message from the SRX Series device

B. The Juniper ATP Appliance received an unknown error message from the SRX Series device

C. The Juniper ATP Appliance was not able to communicate with the SRX Series device

D. The Juniper ATP Appliance was not able to obtain the config lock

Your organization has multiple Active Directory domain to control user access. You must ensure that security polices are passing traffic based upon the user's access rights. What would you use to assist your SRX series devices to accomplish this task?

A. JIMS

B. Junos Space

C. JSA

D. JATP Appliance

You have a webserver and a DNS server residing in the same internal DMZ subnet. The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface. You implement DNS doctoring to ensure remote users can access the webserver.

Which two statements are true in this scenario? (Choose two.)

A. The DNS doctoring ALG is not enabled by default.

B. The Proxy ARP feature must be configured.

C. The DNS doctoring ALG is enabled by default.

D. The DNS CNAME record is translated.