最新なJuniper JN0-633問題集（175題）、真実試験の問題を全部にカバー！

質問 1：
Which two configuration components are required for enabling transparent mode on an SRX device? (Choose two.)
A. interface family ethernet-switching
B. interface family bridge
C. bridge domain
D. IRB
正解：B,C
解説: (Pass4Test メンバーにのみ表示されます)

質問 2：
Your company's network has seen an increase in Facebook-related traffic. You have been asked to restrict the amount of Facebook-related traffic to less than 100 Mbps regardless of congestion.
What are three components used to accomplish this task? (Choose three.)
A. IDP policy
B. application firewall
C. security policy
D. application traffic control
E. application signature
正解：C,D,E
解説: (Pass4Test メンバーにのみ表示されます)

質問 3：
You want to implement a hub-and-spoke VPN topology using a single logical interface on the hub.Which st0 interface configuration is correct for the hub device?
A. [edit interfaces]
user@srx# show
st0 {
unit 0 {
point-to-point;
family inet {
address 10.10.10.1/24;
}
}
}
B. [edit interfaces]
user@srx# show
st0 {
multipoint
unit 0 {
family inet {
address 10.10.10.1/24;
}
}
}
C. [edit interfaces]
user@srx# show
st0 {
unit 0 {
family inet {
address 10.10.10.1/24;
}
}
}
D. [edit interfaces]
user@srx# show
st0 {
unit 0 {
multipoint;
family inet {
address 10.10.10.1/24;
}
}
}
正解：D
解説: (Pass4Test メンバーにのみ表示されます)

質問 4：
You have a group IPsec VPN established with a single key server and five client devices.
Regarding this scenario, which statement is correct?
A. There are five unique Phase 1 security associations and five unique Phase 2 security associations used for this group.
B. There is one unique Phase 1 security association and five unique Phase 2 security associations used for this group.
C. There are five unique Phase 1 security associations and one unique Phase 2 security association used for this group.
D. There is one unique Phase 1 security association and one unique Phase 2 security association used for this group.
正解：C
解説: (Pass4Test メンバーにのみ表示されます)

質問 5：
Click the Exhibit button.
[edit security application-firewall]
user@host# show
rule-sets web {
rule one {
match {
dynamic-application junos:HTTP;
}
then {
permit;
}
}
default-rule {
reject;
}
}
What will happen to non-HTTP traffic that matches the application-firewall policy shown in the exhibit?
A. It will be allowed because this is a whitelist policy.
B. It will be denied because this is a blacklist policy.
C. It will be dropped and an error will be sent to the source.
D. It will be silently dropped.
正解：D

質問 6：
Click the Exhibit button. -- Exhibit-

-- Exhibit -
Referring to the topology shown in the exhibit, which two configuration tasks will allow Host A to telnet to the public IP address associated with Server B? (Choose two.)
A. Configure a destination NAT rule that matches local traffic destined to Server B's public IP address.
B. Configure transparent mode to bypass the NAT processing of Server B's public IP address.
C. Configure a source NAT rule that matches local traffic destined to Server B's public IP address.
D. Configure a stateless filter redirecting local traffic destined to Server B's public IP address.
正解：A,C
解説: (Pass4Test メンバーにのみ表示されます)

質問 7：
Click the Exhibit button.
user@host> show services application-identification application-system-cache
Application System Cache Configurations:
Application-cache: off
nested-application-cache: on
cache-unknown-result: on
cache-entry-timeout: 3600 seconds
You are using the application identification feature on your SRX Series device. The help desk reports that users are complaining about slow Internet connectivity. You issue the command shown in the exhibit.
What must you do to correct the problem?
A. Modify the configuration with thedelete services application-identification no-clearapplication-system-cachecommand and commit the change.
B. Modify the configuration with thedelete services application-identification no-applicationsystem-cachecommand and commit the change.
C. Reboot the SRX Series device.
D. Modify the configuration with thedelete services application-identification no-application -identificationcommand and commit the change.
正解：A

質問 8：
What are two AppSecure modules? (Choose two.)
A. AppNAT
B. AppDoS
C. AppTrack
D. AppFlow
正解：B,C
解説: (Pass4Test メンバーにのみ表示されます)