最新なJuniper JN0-635問題集（173題）、真実試験の問題を全部にカバー！

質問 1：
Which two parameters are required to match in an IDP rule for the terminal option to take effect?
(Choose two.)
A. source-address
B. application
C. attacks custom-attacks
D. attacks predefined-attacks
正解：A,B
解説: (Pass4Test メンバーにのみ表示されます)

質問 2：
Click the Exhibit button.

The exhibit shows a snippet of a security flow trace. A user cannot open an SSH session to a server.
Which action will solve the problem?
A. Create a security policy that matches the traffic parameters
B. Edit the source NAT to correct the translated address
C. Create a route entry to direct traffic into the configured tunnel
D. Create a route to the desired server
正解：A

質問 3：
Which three roles or protocols are required when configuring an ADVPN? (Choose three.)
A. shortcut partner
B. OSPF
C. shortcut suggester
D. IKEv1
E. BGP
正解：A,B,C
解説: (Pass4Test メンバーにのみ表示されます)

質問 4：
Referring to the exhibit, which two statements are true? (Choose two.)

A. The c-1 TSYS can use security flow resources up to the system maximum.
B. The c-1 TSYS cannot use any security flow resources.
C. The c-1 TSYS has no reservation for the security flow resource.
D. The c-1 TSYS has a reservation for the security flow resource.
正解：B,C
解説: (Pass4Test メンバーにのみ表示されます)

質問 5：
Which feature of Sky ATP is deployed with Software-Defined Secure Networks?
A. zero-day threat mitigation
B. service redundancy daemon configuration support
C. device inventory management
D. software image snapshot support
正解：A

質問 6：
You have a webserver and a DNS server residing in the same internal DMZ subnet.
The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface.
You implement DNS doctoring to ensure remote users can access the webserver.
Which two statements are true in this scenario? (Choose two.)
A. The DNS CNAME record is translated.
B. The Proxy ARP feature must be configured.
C. The DNS doctoring ALG is not enabled by default.
D. The DNS doctoring ALG is enabled by default.
正解：B,D

質問 7：
Click the Exhibit button.

Which statement explains the current state value of the command output shown in the exhibit?
A. A probe event generated an entry in the authentication table, but no probe response has been received from the domain PC.
B. The user-to-address mapping was successfully read from the domain controller event logs, and an entry was added to the authentication table witch currently resides on the Routing Engine.
C. An invalid response was received from a domain PC probe, and the user is an invalid domain user.
D. A valid response was received from a domain PC probe, and the user is a valid domain user programmed in the PFE.
正解：B
解説: (Pass4Test メンバーにのみ表示されます)

質問 8：
Click the Exhibit button.
[edit security]
user@host# show policies
global {
policy new-policy {
match {
source-address any;
destination-address any;
application junos-https;
}
then {
permit {
application-services {
application-firewall {
rule-set appfw;
}
}
}
}
}
}
[edit security]
user@host# show application-firewall
rule-sets appfw {
rule 1 {
match {
dynamic-application junos:SSL;
}
then {
permit;
}
}
rule 2 {
match {
dynamic-application junos:HTTP;
}
then {
reject;
}
}
Referring to the exhibit, which two statements are correct? (Choose two.)
A. HTTP traffic is dropped.
B. HTTP traffic is permitted.
C. HTTPS traffic is permitted.
D. HTTPS traffic is dropped.
正解：A,C

質問 9：
Which two statements are true about ADVPN members? (Choose two.)
A. ADVPN members can use IKEv2
B. ADVPN members can use IKEv1
C. ADVPN members are authenticated using certificates
D. ADVPN members are authenticated using pre-shared keys
正解：A,C
解説: (Pass4Test メンバーにのみ表示されます)