Free Juniper JN0-636 Exam Dumps Questions & Answers

Which statement is true about persistent NAT types?

• A.The target-host-port parameter cannot be used with IPv4 addresses in NAT46.
• B.The target-host parameter cannot be used with IPv4 addresses in NAT46
• C.The target-host-port parameter cannot be used with IPv6 addresses in NAT64
• D.The target-host parameter cannot be used with IPv6 addressee in NAT64.

Exhibit

Which two statements are correct about the output shown in the exhibit. (Choose two.)

• A.The packet is an SSH packet
• B.The source address is translated.
• C.The destination address is translated.
• D.The packet matches a user-configured policy

Exhibit

You are trying to configure an IPsec tunnel between SRX Series devices in the corporate office and branch1. You have committed the configuration shown in the exhibit, but the IPsec tunnel is not establishing.
In this scenario, what would solve this problem.

• A.Add multipoint to the st0.0 interface configuration on the branch1 device.
• B.Change the IKE proposal-set to compatible on the branch1 and corporate devices.
• C.Change the IKE mode to aggressive on the branch1 and corporate devices.
• D.Change the local identity to inet advpn on the branch1 device.

Exhibit:
You are troubleshooting a firewall filter shown in the exhibit that is intended to log all traffic and block only inbound telnet traffic on interface ge-0/0/3.
How should you modify the configuration to fulfill the requirements?

• A.Modify the log-all term to add the next term action
• B.Delete the log-all term
• C.Apply a firewall filter to the loopback interface that blocks Telnet traffic
• D.Add a term before the log-all term that blocks Telnet

You have a webserver and a DNS server residing in the same internal DMZ subnet. The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface. You implement DNS doctoring to ensure remote users can access the webserver.Which two statements are true in this scenario? (Choose two.)

• A.The DNS doctoring ALG is enabled by default.
• B.The DNS CNAME record is translated.
• C.The Proxy ARP feature must be configured.
• D.The DNS doctoring ALG is not enabled by default.