[2024] Pass JN0-636 Exam – Real Questions & Answers [Q37-Q55]

QUESTION 38
According to the log shown in the exhibit, you notice the IPsec session is not establishing.
What is the reason for this behavior?

QUESTION 39
Exhibit

You configure Source NAT using a pool of addresses that are in the same subnet range as the external ge-0/0/0 interface on your vSRX device. Traffic that is exiting the internal network can reach external destinations, but the return traffic is being dropped by the service provider router.
Referring to the exhibit, what must be enabled on the vSRX device to solve this problem?

QUESTION 40
Exhibit

You are not able to ping the default gateway of 192.168 100 1 (or your network that is located on your SRX Series firewall.
Referring to the exhibit, which two commands would correct the configuration of your SRX Series device? (Choose two.) A)

B)

C)

D)

QUESTION 41
Referring to the exhibit, which two statements are true? (Choose two.)

QUESTION 42
Exhibit

You areasked to establish an IBGP peering between the SRX Series device and the router, but the session is not being established. In the security flow trace on the SRX device, packet drops are observed as shown in the exhibit.
What is the correct action to solve the problem on the SRX device?

QUESTION 43
You are deploying a virtualization solution with the security devices in your network Each SRX Series device must support at least 100 virtualized instances and each virtualized instance must have its own discrete administrative domain.
In this scenario, which solution would you choose?

QUESTION 44
Exhibit

Referring to the exhibit, a spoke member of an ADVPN is not functioning correctly.
Which two commands will solve this problem? (Choose two.)

QUESTION 45
You have noticed a high number of TCP-based attacks directed toward your primary edge device. You are asked to configure the IDP feature on your SRX Series device to block this attack.
Which two IDP attack objects would you configure to solve this problem? (Choose two.)

QUESTION 46
You want to use selective stateless packet-based forwarding based on the source address.
In this scenario, which command will allow traffic to bypass the SRX Series device flow daemon?

QUESTION 47
You must setup a Ddos solution for your ISP. The solution must be agile and not block legitimate traffic.
Which two products will accomplish this task? (Choose two.)

QUESTION 48
You are asked to implement the session cache feature on an SRX5400.
In this scenario, what information does a session cache entry record? (Choose two.)

QUESTION 49
Which two statements are correct about the output shown in the exhibit? (Choose two.)

QUESTION 50
You are required to deploy a security policy on an SRX Series device that blocks all known for network IP addresses. Which two steps will fulfill this requirement? (Choose two.)

QUESTION 51
Exhibit

Your company recently acquired a competitor. You want to use using the same IPv4 address space as your company.
Referring to the exhibit, which two actions solve this problem? (Choose two)

QUESTION 52
Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)

QUESTION 53
In Juniper ATP Cloud, what are two different actions available in a threat prevention policy to deal with an infected host? (Choose two.)

QUESTION 54
You are connecting two remote sites to your corporate headquarters site.You must ensure that all traffic is secured and sent directly between sites In this scenario, which VPN should be used?

QUESTION 55
You are connecting two remote sites to your corporate headquarters site. You must ensure that all traffic is secured and sent directly between sites In this scenario, which VPN should be used?