[Jun-2023] Exam Sure Pass Juniper Certification with JN0-636 exam questions [Q30-Q47]

QUESTION 30
You are asked to detect domain generation algorithms
Which two steps will accomplish this goal on an SRX Series firewall? (Choose two.)

QUESTION 31
Click the Exhibit button.

You are implementing a new branch site and want to ensure Internet traffic is sent directly to your ISP and other traffic is sent to your company headquarters. You have configured filter-based forwarding to accomplish this objective. You verify proper functionality using the outputs shown in the exhibit.
Which two statements are true in this scenario? (Choose two.)

QUESTION 32
Your company recently acquired a competitor. You want to use using the same IPv4 address space as your company.
Referring to the exhibit, which two actions solve this problem? (Choose two)

QUESTION 33
Exhibit

Referring to the exhibit, an internal host is sending traffic to an Internet host using the 203.0.113.1 reflexive address with source port 54311.
Which statement is correct in this situation?

QUESTION 34
Exhibit

You configure Source NAT using a pool of addresses that are in the same subnet range as the external ge-0/0/0 interface on your vSRX device. Traffic that is exiting the internal network can reach external destinations, but the return traffic is being dropped by the service provider router.
Referring to the exhibit, what must be enabled on the vSRX device to solve this problem?

QUESTION 35
Exhibit

Referring to the exhibit, which three statements are true? (Choose three.)

QUESTION 36
You are asked to implement the session cache feature on an SRX5400.
In this scenario, what information does a session cache entry record? (Choose two.)

QUESTION 37
You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restricted to the VLANs from which they originate.
Which configuration accomplishes these objectives?
A)

B)

C)

D)

QUESTION 38
Which two statements are correct about the output shown in the exhibit? (Choose two.)

QUESTION 39
What is the purpose of the Switch Microservice of Policy Enforcer?

QUESTION 40
Exhibit

You areasked to establish an IBGP peering between the SRX Series device and the router, but the session is not being established. In the security flow trace on the SRX device, packet drops are observed as shown in the exhibit.
What is the correct action to solve the problem on the SRX device?

QUESTION 41
SRX Series device enrollment with Policy Enforcer fails To debug further, the user issues the following commandshow configuration services security-intelligence url
https : //cloudfeeds . argon . juniperaecurity . net/api/manifeat. xml
and receives the following output:
What is the problem in this scenario?

QUESTION 42
You are asked to set up notifications if one of your collector traffic feeds drops below 100 kbps.
Which two configuration parameters must be set to accomplish this task? (Choose two.)

QUESTION 43
While troubleshooting security policies, you added the count action.
Where do you see the result of this action?

QUESTION 44
Exhibit.

A hub member of an ADVPN is not functioning correctly.
Referring the exhibit, which action should you take to solve the problem?

QUESTION 45
Which two features would be used for DNS doctoring on an SRX Series firewall? (Choose two.)

QUESTION 46
You are asked to allocate security profile resources to the interconnect logical system for it to work properly.
In this scenario, which statement is correct?

QUESTION 47
Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)