لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت

السؤال #1
You have configured three logical tunnel interfaces in a tenant system on an SRX1500 device. When committing the configuration, the commit fails. In this scenario, what would cause this problem?
A. There is no GRE tunnel between the tenant system and master system allowing SSH traffic
B. There is no VPLS switch on the tenant system containing a peer It-0/0/0 interface
C. The SRX1500 device does not support more than two logical interfaces per tenant systemD
عرض الإجابة
اجابة صحيحة: B
السؤال #2
You are asked to configure an IPsec VPN between two SRX Series devices that allows for processing of CoS on the intermediate routers. What will satisfy this requirement?
A. route-based VPN
B. OpenVPN
C. remote access VPN
D. policy-based VPN
عرض الإجابة
اجابة صحيحة: CD
السؤال #3
You are asked to merge to corporate network with the network from a recently acquired company. Both networks use the same private IPv4 address space (172.25.126.0/24). An SRX Series device servers as the gateway for each network. Which solution allows you to merge the two networks without modifying the current address assignments?
A. persistent NAT
B. NAT46
C. source NATD
عرض الإجابة
اجابة صحيحة: D
السؤال #4
You have configured static NAT for a webserver in your DMZ. Both internal and external users can reach the webserver using the webserver’s IP address. However, only internal users can reach the webserver using the webserver’s DNS name. When external users attempt to reach the webserver using the webserver’s DNS name, an error message is received. Which action would solve this problem?
A. Disable Web filtering
B. Use DNS doctoring
C. Modify the security policy
D. Use destination NAT instead of static NAT
عرض الإجابة
اجابة صحيحة: BD
السؤال #5
Click the Exhibit button. A user is trying to reach a company’s website, but the connection errors out. The security policies are configured correctly. Referring to the exhibit, what is the problem?
A. Persistent NAT must be enabled
B. The action for rule 1 must change to static-nat inet
C. DNS ALG must be disabled
D. Static NAT is missing a rule for DNS server
عرض الإجابة
اجابة صحيحة: ABC
السؤال #6
You have set up Security Director with Policy Enforcer and have configured 12 third-party feeds and a Sky ATP feed. You are also injecting 16 feeds using the available open API. You want to add another compatible feed using the available open API, but Policy Enforcer is not receiving the new feed. What is the problem in this scenario?
A. You must wait 48 hours for the feed to update
B. You cannot add more than 16 feeds through the available open API
C. You have reached the maximum limit of 29 total feeds
D. You cannot add more than 16 feeds with the available open API
عرض الإجابة
اجابة صحيحة: B
السؤال #7
Click the Exhibit button. Referring to the exhibit, which two statements are true? (Choose two.)
A. The SRX Series device is enrolled and communicating with a JATP Appliance
B. The JATP Appliance cannot download the security feeds from the GSS servers
C. The SRX Series device cannot download the security feeds from the JATP Appliance
D. The SRX Series device is not enrolled but can communicate with the JATP Appliance
عرض الإجابة
اجابة صحيحة: AD
السؤال #8
Click the Exhibit button. You are asked to look at a configuration that is designed to take all traffic with a specific source IP address and forward the traffic to a traffic analysis server for further evaluation. The configuration is not working as intended. Referring to the exhibit, which change must be made to correct the configuration?
A. Apply the filter as an input filter on interface xe-0/2/1
B. Create a routing instance named default
C. Apply the filter as an input filter on interface xe-0/0/1
D. Apply the filter as an output filter on interface xe-0/1/0
عرض الإجابة
اجابة صحيحة: A
السؤال #9
Click the Exhibit button. The exhibit shows a snippet of a security flow trace. A user cannot open an SSH session to a server. Which action will solve the problem?
A. Create a security policy that matches the traffic parameters
B. Edit the source NAT to correct the translated address
C. Create a route entry to direct traffic into the configured tunnel
D. Create a route to the desired server
عرض الإجابة
اجابة صحيحة: C
السؤال #10
Click the Exhibit button. Referring to the exhibit, which two statements are true? (Choose two.)
A. Data is transmitted across the link in plaintext
B. The link is not protected against man-in-the-middle attacks
C. The link is protected against man-in-the-middle attacks
D. Data is transmitted across the link in cyphertext
عرض الإجابة
اجابة صحيحة: ADE
السؤال #11
Click the Exhibit button. You have recently committed the IPS policy shown in the exhibit. When evaluating the expected behavior, you notice that you have a session that matches all the rules in your IPS policy. In this scenario, which action would be taken?
A. drop packet
B. no-action
C. close-client-and-server
D. ignore-connection
عرض الإجابة
اجابة صحيحة: B
السؤال #12
You correctly configured a security policy to deny certain traffic, but logs reveal that traffic is still allowed. Which specific traceoption flag will help you troubleshoot this problem?
A. lookup
B. configuration
C. routing-socket
D. rules
عرض الإجابة
اجابة صحيحة: AC
السؤال #13
When would you use the port-overloading-factor 1 setting?
A. to enable the port-overloading
B. to disable the port-overloading
C. to map ports with 1:1 ratio for port-overloading
D. to set the maximum port-overloading capacity to 65,536
عرض الإجابة
اجابة صحيحة: BD
السؤال #14
Your organization has multiple Active Directory domains to control user access. You must ensure that security policies are passing traffic based upon the users’ access rights. What would you use to assist your SRX Series devices to accomplish this task?
A. JATP Appliance
B. JIMS
C. JSA
D. Junos Space
عرض الإجابة
اجابة صحيحة: B
السؤال #15
Click the Exhibit button. You are implementing a new branch site and want to ensure Internet traffic is sent directly to your ISP and other traffic is sent to your company headquarters. You have configured filter-based forwarding to accomplish this objective. You verify proper functionality using the outputs shown in the exhibit. Which two statements are true in this scenario? (Choose two.)
A. The session utilizes one routing instance
B. The ge-0/0/5 and ge-0/0/1 interfaces must reside in a single security zone
C. The ge-0/0/5 and ge-0/0/1 interfaces can reside in different security zones
D. The session utilizes two routing instances
عرض الإجابة
اجابة صحيحة: D
السؤال #16
Click the Exhibit button. Referring to the exhibit, which statement is true?
A. ARP security is securing data across the control interface
B. IPsec is securing data across the control interface
C. SSH is securing data across the control interface
D. MACsec is securing data across the control interface
عرض الإجابة
اجابة صحيحة: B

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف: