QUESTION 27
You are connecting two remote sites to your corporate headquarters site; you must ensure that all traffic is secured and only uses a single Phase 2 SA for both sites.
In this scenario, which VPN should be used?

QUESTION 28
You want to identify potential threats within SSL-encrypted sessions without requiring SSL proxy to decrypt the session contents.
Which security feature achieves this objective?

QUESTION 29
You must setup a Ddos solution for your ISP. The solution must be agile and not block legitimate traffic.
Which two products will accomplish this task? (Choose two.)

QUESTION 30
Exhibit

The show network-access aaa radius-servers command has been issued to solve authentication issues.
Referring to the exhibit, to which two authentication servers will the SRX Series device continue to send requests? (Choose TWO)

QUESTION 31
Exhibit

You configure a traceoptions file called radius on your returns the output shown in the exhibit What is the source of the problem?

QUESTION 32
Refer to the Exhibit:

Which two statements about the configuration shown in the exhibit are correct?

QUESTION 33
You are asked to deploy Juniper atp appliance in your network. You must ensure that incidents and alerts are sent to your SIEM.
In this scenario, which logging output format is supported?

QUESTION 34
You have a webserver and a DNS server residing in the same internal DMZ subnet. The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface. You implement DNS doctoring to ensure remote users can access the webserver.
Which two statements are true in this scenario? (Choose two.)

QUESTION 35
In Juniper ATP Cloud, what are two different actions available in a threat prevention policy to deal with an infected host? (Choose two.)

QUESTION 36
You want to enable inter-tenant communicaon with tenant system.
In this Scenario, which two solutions will accomplish this task?

QUESTION 37
Exhibit.

Referring to the exhibit, a spoke member of an ADVPN is not functioning correctly.
Which two commands will solve this problem? (Choose two.)

QUESTION 38
Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)

QUESTION 39
What are two important function of the Juniper Networks ATP appliance solution? (Choose two.).

QUESTION 40
Exhibit

You are using ATP Cloud and notice that there is a host with a high number of ETI and C&C hits sourced from the same investigation and notice that some of the events have not been automatically mitigated.
Referring to the exhibit, what is a reason for this behavior?

QUESTION 41
You have the NAT rule, shown in the exhibit, applied to allow communication across an IPsec tunnel between your two sites with identical networks.
Which statement is correct in this scenario?

QUESTION 42
Exhibit

Referring to the exhibit, which type of NAT is being performed?

QUESTION 43
Exhibit:


You are troubleshooting a firewall filter shown in the exhibit that is intended to log all traffic and block only inbound telnet traffic on interface ge-0/0/3.
How should you modify the configuration to fulfill the requirements?

QUESTION 44
You are asked to provide single sign-on (SSO) to Juniper ATP Cloud.
Which two steps accomplish this goal? (Choose two.)

QUESTION 45
You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restricted to the VLANs from which they originate.
Which configuration accomplishes these objectives?

QUESTION 46
Exhibit

You are implementing filter-based forwarding to send traffic from the 172.25.0.0/24 network through ISP-
1 while sending all other traffic through your connection to ISP-2. Your ge-0/0/1 interface connects to two networks, including the 172.25.0.0/24 network. You have implemented the configuration shown in the exhibit. The traffic from the 172.25.0.0/24 network is being forwarded as expected to 172.20.0.2, however traffic from the other network (172.25.1.0/24) is not being forwarded to the upstream 172.21.0.2 neighbor.
In this scenario, which action will solve this problem?

QUESTION 47
You are asked to determine if the 203.0.113.5 IP address has been added to the third-party security feed, DS hield, from Juniper Seclnte1. You have an SRX Series device that is using Seclnte1 feeds from Juniper ATP Cloud Which command will return this information?

QUESTION 48
Which two log format types are supported by the JATP appliance? (Choose two.)

QUESTION 49
Which two statements are correct regarding tenant systems on SRX Series devices? (Choose two.)

QUESTION 50
You have designed the firewall filter shown in the exhibit to limit SSH control traffic to yours SRX Series device without affecting other traffic.
Which two statement are true in this scenario? (Choose two.)

QUESTION 51
You must implement an IPsec VPN on an SRX Series device using PKI certificates for authentication.
As part of the implementation, you are required to ensure that the certificate submission, renewal, and retrieval processes are handled automatically from the certificate authority.
In this scenario, which statement is correct.