JN0-635 Online Practice Questions and Answers

Click the Exhibit button.

While configuring the SRX345, you review the MACsec connection between devices and note that it is not working.

Referring to the exhibit, which action would you use to identify problem?

A. Verify that the formatting settings are correct between the devices and that the software supports the version of MACsec in use

B. Verify that the connectivity association key and the connectivity association key name match on both devices

C. Verify that the transmission path is not replicating packets or correcting frame check sequence error packets

D. Verify that the interface between the two devices is up and not experiencing errors

You are asked to set up notifications if one of your collector traffic feeds drops below 100 kbps.

Which two configuration parameters must be set to accomplish this task? (Choose two.)

A. Set a traffic SNMP trap on the JATP appliance

B. Set a logging notification on the JATP appliance

C. Set a general triggered notification on the JATP appliance

D. Set a traffic system alert on the JATP appliance

You are asked to merge to corporate network with the network from a recently acquired company. Both networks use the same private IPv4 address space (172.25.126.0/24). An SRX Series device servers as the gateway for each network.

Which solution allows you to merge the two networks without modifying the current address assignments?

A. persistent NAT

B. NAT46

C. source NAT

D. double NAT

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

A. The SRX Series device is enrolled and communicating with a JATP Appliance

B. The JATP Appliance cannot download the security feeds from the GSS servers

C. The SRX Series device cannot download the security feeds from the JATP Appliance

D. The SRX Series device is not enrolled but can communicate with the JATP Appliance

Click the Exhibit button.

Referring to the exhibit, which statement is true?

A. Source NAT with PAT is occurring

B. Destination NAT is occurring

C. Static NAT without PAT is occurring

D. Source NAT without PAT is occurring

Click the Exhibit button.

Which statement is correct regarding the information show in the exhibit?

A. The tunnel binding was discovered automatically

B. The output is for an ADVPN

C. The tunnel gateway address was automatically discovered

D. The tunnel is not encrypting the traffic

Your SRX Series device does not see the SYN packet. What is the default action in this scenario?

A. The device will forward the subsequent packets and the session will be established

B. The device will forward the subsequent packets and the session will not be established

C. The device will drop the subsequent packets and the session will not be established

D. The device will drop the subsequent packets and the session will be established

An administrator wants to implement persistent NAT for an internal resource so that external hosts are able to initiate communications to the resource, with the internal resource having previously sent packets to the external hosts.

Which configuration setting is used to accomplish this goal?

A. persistent-nat permit any-remote-host

B. persistent-nat permit target-host-port

C. address-persistent

D. persistent-nat permit target-host

You have a remote access VPN where the remote users are using the NCP client. The remote users can access the internal corporate resources as intended; however, traffic that is destined to all other Internet sites is going through the remote access VPN. You want to ensure that only traffic that is destined to the internal corporate resources use the remote access VPN.

Which two actions should you take to accomplish this task? (Choose two.)

A. Enable the split tunneling feature within the VPN configuration on the SRX Series device

B. Enable IKEv2 within the VPN configuration on the SRX Series device

C. Configure the necessary traffic selectors within the VPN configuration on the SRX Series device

D. Configure split tunneling on the NCP profile on the remote client

Exhibit.

A hub member of an ADVPN is not functioning correctly. Referring the exhibit, which action should you take to solve the problem?

A. [edit interfaces] root@vSRX-1# delete st0.0 multipoint

B. [edit interfaces] user@hub-1# delete ipsec vpn advpn-vpn traffic-selector

C. [edit security] user@hub-1# set ike gateway advpn-gateway advpn suggester disable

D. [edit security] user@hub-1# delete ike gateway advpn-gateway advpn partner