《Juniper Security Support Professional JNCSP-SEC JN0-696题库》.pdfVIP

s@lm@n Juniper Exam JN0-696 Security Support, Professional (JNCSP-SEC) Version: 6.0 [ Total Questions: 36 ] 买题库 QQ:860424807 Juniper JN0-696 : Practice Test Question No : 1 You are having problems establishing an IPsec tunnel between two SRX Series devices. What are two explanations for this problem? (Choose two.) A. proposal mismatch B. antivirus configuration C. preshared key mismatch D. TCP MSS clamping is disabled Answer: B,D Question No : 2 Two SRX Series devices are having problems establishing an IPsec VPN session. One of the devices has a firewall filter applied to its gateway interface that rejects UDP traffic. What would resolve the problem? A. Disable the IKE Phase 1 part of the session establishment. B. Disable the IKE Phase 2 part of the session establishment. C. Change the configuration so that session establishment uses TCP. D. Edit the firewall filter to allow UDP port 500. Answer: A Question No : 3 Your SRX Series device has the following configuration: user@host show security policies ... Policy: my-policy, State: enabled, Index: 5, Sequence number: 1 Source addresses: any 2 买题库 QQ:860424807 Juniper JN0-696 : Practice Test Destination addresses: any Applications: snmp Action: reject From zone: trust, To zone: untrust ... When traffic matches my-policy, you want the device to silently drop the traffic; however, you notice that the device is replying with ICMP unreachable messages instead. What is causing this behavior? A. the snmp application B. the reject action C. the trust zone D. the untrust zone Answer: C Question No : 4 You want to allow remote users using PCs r