Online Access Free Juniper.JN0-635.v2022-05-28.q77 Practice Test (Page 4)

JN0-635 Exam Question 11

Click the Exhibit button.

You have configured tenant systems on your SRX Series device.
Referring to the exhibit, which two actions should you take to facilitate inter-TSYS communication? (Choose two.)

A.Place the logical tunnel interfaces in a virtual router routing instance in the interconnect switch

B.Connect each TSYS with the interconnect switch by configuring Ethernet VPLS configured logical tunnel interfaces in the interconnect switch

C.Connect each TSYS with the interconnect switch by configuring INET configured logical tunnel interfaces in the interconnect switch

D.Place the logical tunnel interfaces in a VPLS routing instance in the interconnect switch

JN0-635 Exam Question 12

You have a webserver and a DNS server residing in the same internal DMZ subnet. The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface. You implement DNS doctoring to ensure remote users can access the webserver.Which two statements are true in this scenario? (Choose two.)

A.The DNS doctoring ALG is not enabled by default.

B.The DNS doctoring ALG is enabled by default.

C.The Proxy ARP feature must be configured.

D.The DNS CNAME record is translated.

JN0-635 Exam Question 13

You are asked to configure a new SRX Series CPE device at a remote office. The device must participate in forwarding MPLS and IPsec traffic.
Which two statements are true regarding this implementation? (Choose two.)

A.Host inbound traffic must not be processed by the flow module

B.Host inbound traffic must be processed by the flow module

C.The SRX Series device can process both MPLS and IPsec with default traffic handling

D.A firewall filter must be configured to enable packet mode forwarding

JN0-635 Exam Question 14

You must implement an IPsec VPN on an SRX Series device using PKI certificates for authentication. As part of the implementation, you are required to ensure that the certificate submission, renewal, and retrieval processes are handled automatically from the certificate authority.
In this scenario, which statement is correct.

A.You can use CRL to accomplish this behavior.

B.You can use SCEP to accomplish this behavior.

C.You can use OCSP to accomplish this behavior.

D.You can use SPKI to accomplish this behavior.

JN0-635 Exam Question 15

Click the Exhibit button.

The IKE policy and proposal are configured properly on both devices as shown in the exhibit. Which configuration snippet will complete the IKE configuration on the branch SRX Series device?
A)