Online Access Free JN0-635 Exam Questions

Click the Exhibit button.

Your company has purchased a competitor and now must connect the new network to the existing one. The competitor's gateway device is receiving its ISP address using DHCP.
Communication between the two sites must be secured; however, obtaining a static public IP address for the new site gateway is not an option at this time. The company has several requirements for this solution:
- A site-to-site IPsec VPN must be used to secure traffic between the
two sites;
- The IKE identity on the new site gateway device must use the hostname option; and
- Internet traffic from each site should exit through its local
Internet connection.
The configuration shown in the exhibit has been applied to the new site's SRX, but the secure tunnel is not working.
In this scenario, what configuration change is needed for the tunnel to come up?

• A.Bind interface st0 to the gateway
• B.Change the IKE policy mode to aggressive
• C.Apply a static address to ge-0/0/2
• D.Remove the quotes around the hostname

You are asked to configure an SRX Series device to bypass all security features for IP traffic from the engineering department.
Which firewall filter will accomplish this task?

• A.
• B.
• C.
• D.

You are asked to set up notifications if one of your collector traffic feeds drops below 100 kbps.
Which two configuration parameters must be set to accomplish this task? (Choose two.)

• A.Set a traffic SNMP trap on the JATP appliance
• B.Set a traffic system alert on the JATP appliance
• C.Set a general triggered notification on the JATP appliance
• D.Set a logging notification on the JATP appliance

You have implemented APBR on your SRX Series device and are verifying that your changes are working properly. You notice that when you start the application for the first time, it does not follow the expected path.
What are two reasons that would cause this behavior? (Choose two.)

• A.The application system cache has been disabled.
• B.The advanced policy-based routing is applied to the ingress zone and must be moved to the egress zone.
• C.The application system cache already has an entry for this application.
• D.The application system cache does not have an entry for the first session.

Click the Exhibit button.
[edit security]
user@host# show policies
global {
policy new-policy {
match {
source-address any;
destination-address any;
application junos-https;
}
then {
permit {
application-services {
application-firewall {
rule-set appfw;
}
}
}
}
}
}
[edit security]
user@host# show application-firewall
rule-sets appfw {
rule 1 {
match {
dynamic-application junos:SSL;
}
then {
permit;
}
}
rule 2 {
match {
dynamic-application junos:HTTP;
}
then {
reject;
}
}
Referring to the exhibit, which two statements are correct? (Choose two.)

• A.HTTP traffic is permitted.
• B.HTTPS traffic is permitted.
• C.HTTPS traffic is dropped.
• D.HTTP traffic is dropped.