JN0-637 무료 덤프문제 온라인 액세스

You have deployed an SRX Series device at your network edge to secure Internet-bound sessions for your local hosts using source NAT. You want to ensure that your users are able to interact with applications on the Internet that require more than one TCP session for the same application session. Which two features would satisfy this requirement? (Choose two.)

• A.double NAT
• B.persistent NAT
• C.STUN
• D.address persistence

Which two statements are correct about automated threat mitigation with Security Director?
(Choose two.)

• A.It works with SRX Series devices.
• B.It provides endpoint protection by running a Juniper ATP Cloud agent on the servers.
• C.It works with third-party switches.
• D.It provides endpoint protection by running a Juniper ATP Cloud agent on EX Series devices.

Which two additional configuration actions are necessary for the third-party feed shown in the exhibit to work properly? (Choose two.)

• A.You must apply the dynamic address entry in a security policy.
• B.You must create a dynamic address entry with the C&C category and the cc_offic365 value.
• C.You must create a dynamic address entry with the IP filter category and the ipfilter_office365 value.
• D.You must apply the dynamic address entry in a security intelligence policy.

Which Junos security feature is used for signature-based attack prevention?

• A.RADIUS
• B.AppQoS
• C.PIM
• D.IPS

Click the Exhibit button.

Referring to the exhibit. SRX-1 and SRX-3 have to be connected using EBGP. The BGP configuration on SRX-1 and SRX-3 is verified and correct.
Which configuration on SRX-2 would establish an EBGP connection successfully between SRX-1 and SRX-3?

• A.The security policy to allow SRX-1 and SRX-3 to communicate on TCP port 79 should be configured.
• B.The host-inbound-traffic statements do not allow EBGP traffic to traverse SRX-2.
• C.The security policy to allow SRX-1 and SRX-3 to communicate on TCP port 169 should be configured.
• D.The security policy to allow SRX-1 and SRX-3 to communicate on TCP port 179 should be configured.