JN0-633 Online Practice Questions and Answers

You are using logical systems to segregate customers. You have a requirement to enable communication between the logical systems. What are two ways to accomplish this goal? (Choose two.)

A. Use a shared DMZ zone to connect the logical systems together.

B. Use a virtual tunnel (vt-) interface to connect the logical systems together.

C. Use an external cable to connect the ports from the two logical systems.

D. Use an interconnect LSYS to connect the logical systems together.

Which statement is true regarding dual-stack lite?

A. The softwire is an IPv4 tunnel over an IPv6 network.

B. The softwire initiator (SI) encapsulates IPv6 packets in IPv4.

C. The softwire concentrator (SC) decapsulates softwire packets.

D. SRX devices support the softwire concentrator and softwire initiator functionality.

In which situation is NAT proxy NDP required?

A. when translated addresses belong to the same subnet as the ingress interface

B. when filter-based forwarding and static NAT are used on the same interface

C. when working with static NAT scenarios

D. when the security device operates in transparent mode

You are asked to deploy dynamic VPNs between the corporate office and remote employees that work from home. The gateway device at the corporate office is a chassis cluster formed from two SRX240s. Which two statements about this deployment are true? (Choose two.)

A. You must remove the SRX240s from the chassis cluster before enabling the dynamic VPNs.

B. The remote clients can run Windows XP, Windows Vista, Windows 7, or OS X operating systems.

C. If more than two dynamic VPN tunnels are required, you must purchase and install a new license.

D. The remote users can be authenticated by the SRX240s or a configured RADIUS server.

Which two configuration components are required for enabling transparent mode on an SRX device? (Choose two.)

A. IRB

B. bridge domain

C. interface family bridge

D. interface family ethernet-switching

Which QoS function is supported in transparent mode?

A. 802.1p

B. DSCP

C. IP precedence

D. MPLS EXP

[edit] useu@host# run show log debug Feb 3 22:04:32 22:04:31.983991:CID-0:RT: ge-0/0/1.0:5.0.0.25/59028->25.0.0.25/23, tcp, flag 18

Feb 3 22:04:32 22:04:31.983997:CID-0:RT: find flow: table 0x582738c0, hash

53561(0xffff), sa 5.0.0.25, da 5.0.0.25, sp 59028, dp 23, proto 6, tok 20489 Feb 3 22:04:32 22:04:31.984004:CID-0:RT:Found: session id 0x14f98. sess tok 20489

Feb 3 22:04:32 22:04:31.984005:CID-0:RT: flow got session.

Feb 3 22:04:32 22:04:31.984006:CID-0:RT: flow session id 85912

Feb 3 22:04:32 22:04:31.984009:CID-0:RT: vector bits 0x2 vector 0x53a949e8

Feb 3 22:04:32 22:04:31.984012:CID-0:RT: tcp sec check.

Feb 3 22:04:32 22:04:31.984015:CID-0:RT:mbuf 0x4a82cd80, exit nh 0xa0010

Which two statements are true regarding the output shown in the exhibit? (Choose two.)

A. The outgoing interface is ge-0/0/1.0.

B. The packet is subject to fast-path packet processing.

C. The packet is part of the first-packet path processing.

D. TCP sequence checking is enabled.

You are asked to ensure traffic from your executive staff does not use the same ISP connection as your other traffic.

Which three actions are required to accomplish this task? (Choose three)

A. Create a firewall filter to match this traffic and send this traffic to the routing instance.

B. Create a routing instance and define the type as no-forwarding.

C. Assign the outgoing interface to the no-forwardinginstance.

D. Create a routing instance and define the type as forwarding.

E. Create a RIB group to share routes between the main instance and the routing instance.