لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت
السؤال #1
What must be enabled on an SRX Series device for the reporting engine to create reports?
A. System logging
B. SNMP
C. Packet capture
D. Security logging
عرض الإجابة
اجابة صحيحة: C
السؤال #2
What are two characteristics of a null zone? (Choose two.)
A. The null zone is configured by the super user
B. By default, all unassigned interfaces are placed in the null zone
C. All ingress and egress traffic on an interface in a null zone is permitted
D. When an interface is deleted from a zone, it is assigned back to the null zone
عرض الإجابة
اجابة صحيحة: BD
السؤال #3
What is an IP addressing requirement for an IPsec VPN using main mode?
A. One peer must have dynamic IP addressing
B. One peer must have static IP addressing
C. Both peers must have dynamic IP addresses
D. Both peers must have static IP addressing
عرض الإجابة
اجابة صحيحة: A
السؤال #4
Click the Exhibit button. What is the purpose of the host-inbound-traffic configuration shown in the exhibit?
A. to permit host inbound HTTP traffic and deny all other traffic on the internal security zone
B. to deny and log all host inbound traffic on the internal security zone, except for HTTP traffic
C. to permit all host inbound traffic on the internal security zone, but deny HTTP traffic
D. to permit host inbound HTTP traffic on the internal security zone
عرض الإجابة
اجابة صحيحة: C
السؤال #5
What is the correct order in which interface names should be identified?
A. system slot number –> interface media type –> port number –> line card slot number
B. system slot number –> port number –> interface media type –> line card slot number
C. interface media type –> system slot number –> line card slot number –> port number
D. interface media type –> port number –> system slot number –> line card slot number
عرض الإجابة
اجابة صحيحة: C
السؤال #6
You are asked to verify that a license for AppSecure is installed on an SRX Series device. In this scenario, which command will provide you with the required information?
A. user@srx> show system license
B. user@srx> show services accounting
C. user@srx> show configuration system
D. user@srx> show chassis firmware
عرض الإجابة
اجابة صحيحة: BC
السؤال #7
Which Juniper ATP feed provides a dynamic list of known botnet servers and known sources of malware downloads?
A. infected host cloud feed
B. Geo IP feed
C. C&C cloud feed
D. blocklist feed
عرض الإجابة
اجابة صحيحة: D
السؤال #8
Which two statements are correct about functional zones? (Choose two.)
A. Functional zones must have a user-defined name
B. Functional zone cannot be referenced in security policies or pass transit traffic
C. Multiple types of functional zones can be defined by the user
D. Functional zones are used for out-of-band device management
عرض الإجابة
اجابة صحيحة: BD
السؤال #9
Screens on an SRX Series device protect against which two types of threats? (Choose two.)
A. IP spoofing
B. ICMP flooding
C. zero-day outbreaks
D. malicious e-mail attachments
عرض الإجابة
اجابة صحيحة: AC
السؤال #10
You are asked to configure your SRX Series device to block all traffic from certain countries. The solution must be automatically updated as IP prefixes become allocated to those certain countries. Which Juniper ATP solution will accomplish this task?
A. Geo IP
B. unified security policies
C. IDP
D. C&C feed
عرض الإجابة
اجابة صحيحة: AC
السؤال #11
What are two valid address books? (Choose two.)
A. 66
B. 66
C. 66
D. 66
عرض الإجابة
اجابة صحيحة: D
السؤال #12
Which two statements are correct about IPsec security associations? (Choose two.)
A. IPsec security associations are bidirectional
B. IPsec security associations are unidirectional
C. IPsec security associations are established during IKE Phase 1 negotiations
D. IPsec security associations are established during IKE Phase 2 negotiations
عرض الإجابة
اجابة صحيحة: A
السؤال #13
When are Unified Threat Management services performed in a packet flow?
A. before security policies are evaluated
B. as the packet enters an SRX Series device
C. only during the first path process
D. after network address translation
عرض الإجابة
اجابة صحيحة: AD
السؤال #14
You want to deploy a NAT solution. In this scenario, which solution would provide a static translation without PAT?
A. interface-based source NAT
B. pool-based NAT with address shifting
C. pool-based NAT with PAT
D. pool-based NAT without PAT
عرض الإجابة
اجابة صحيحة: CD
السؤال #15
Which statement about global NAT address persistence is correct?
A. The same IP address from a source NAT pool will be assigned for all sessions from a given host
B. The same IP address from a source NAT pool is not guaranteed to be assigned for all sessions from a given host
C. The same IP address from a destination NAT pool will be assigned for all sessions for a given host
D. The same IP address from a destination NAT pool is not guaranteed to be assigned for all sessions for a given host
عرض الإجابة
اجابة صحيحة: A
السؤال #16
Which two traffic types are considered exception traffic and require some form of special handling by the PFE? (Choose two.)
A. SSH sessions
B. ICMP reply messages
C. HTTP sessions
D. traceroute packets
عرض الإجابة
اجابة صحيحة: D
السؤال #17
Which two criteria should a zone-based security policy include? (Choose two.)
A. a source port
B. a destination port
C. zone context
D. an action
عرض الإجابة
اجابة صحيحة: C
السؤال #18
Which order is correct for Junos security devices that examine policies for transit traffic?
A. zone policies global policies default policies
B. default policies zone policies global policies
C. default policies global policies zone policies
D. global policies zone policies default policies
عرض الإجابة
اجابة صحيحة: A
السؤال #19
Which statement about service objects is correct?
A. All applications are predefined by Junos
B. All applications are custom defined by the administrator
C. All applications are either custom or Junos defined
D. All applications in service objects are not available on the vSRX Series device
عرض الإجابة
اجابة صحيحة: AD
السؤال #20
Which statement about NAT is correct?
A. Destination NAT takes precedence over static NAT
B. Source NAT is processed before security policy lookup
C. Static NAT is processed after forwarding lookup
D. Static NAT takes precedence over destination NAT
عرض الإجابة
اجابة صحيحة: A
السؤال #21
What are two logical properties of an interface? (Choose two.)
A. link mode
B. IP address
C. VLAN ID
D. link speed
عرض الإجابة
اجابة صحيحة: C
السؤال #22
You want to verify the peer before IPsec tunnel establishment. What would be used as a final check in this scenario?
A. traffic selector
B. perfect forward secrecy
C. st0 interfaces
D. proxy ID
عرض الإجابة
اجابة صحيحة: C
السؤال #23
Which security policy type will be evaluated first?
A. A zone policy with no dynamic application set
B. A global with no dynamic application set
C. A zone policy with a dynamic application set
D. A global policy with a dynamic application set
عرض الإجابة
اجابة صحيحة: C

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف:


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.