Online Access Free Juniper.JN0-636.v2023-03-20.q46 Practice Test (Page 8)

JN0-636 Exam Question 31

Exhibit

Referring to the exhibit, an internal host is sending traffic to an Internet host using the 203.0.113.1 reflexive address with source port 54311.
Which statement is correct in this situation?

A.Only the Internet host that the internal host originally communicated with can initiate traffic to reach the internal host using the 203.0 113.1 address, a random source port, and destination port 54311.

B.Any host on the Internet can initiate traffic to reach the internal host using the 203.0.113.1 address, source port 54311, and a random destination port.

C.Any host on the Internet can initiate traffic to reach the internal host using the 203.0.113.1 address, a random source port, and destination port 54311.

D.Only the Internet host that the internal host originally communicated with can initiate traffic to reach the internal host using the 203.0.113.1 address, source port 54311, and a random destination port.

JN0-636 Exam Question 32

Which two statements are correct regarding tenant systems on SRX Series devices? (Choose two.)

A.A maximum of 32 tenant systems can be configured on a physical SRX device.

B.Each tenant system runs its own instance of the routing protocol process

C.A maximum of 500 tenant systems can be configured on a physical SRX device.

D.All tenant systems share a single routing protocol process.

JN0-636 Exam Question 33

You have the NAT rule, shown in the exhibit, applied to allow communication across an IPsec tunnel between your two sites with identical networks. Which statement is correct in this scenario?

A.The NAT rule in applied to the N/A routing instance.

B.The NAT rule will only translate two addresses at a time.

C.The NAT rule with translate the source and destination addresses.

D.10 packets have been processed by the NAT rule.

JN0-636 Exam Question 34

Regarding IPsec CoS-based VPNs, what is the number of IPsec SAs associated with a peer based upon?

A.The number of forwarding classes configured for the VPN.

B.The number of classifiers configured for the VPN.

C.The number of traffic selectors configured for the VPN.

D.The number of CoS queues configured for the VPN.

JN0-636 Exam Question 35

Exhibit

You are not able to ping the default gateway of 192.168 100 1 (or your network that is located on your SRX Series firewall.
Referring to the exhibit, which two commands would correct the configuration of your SRX Series device? (Choose two.) A)