Question 1

Which two types of source NAT translations are supported in this scenario? (Choose two.)

Options :

A : translation of IPv4 hosts to IPv6 hosts with or without port address translation

B : translation of one IPv4 subnet to one IPv6 subnet with port address translation

C : translation of one IPv6 subnet to another IPv6 subnet without port address translation

D : translation of one IPv6 subnet to another IPv6 subnet with port address translation

Answer: A,C

Question 2

Which three type of peer devices are supported for Cos-Based IPsec VPN?

Options :

A : High-end SRX Series device

B : cSRX

C : vSRX

D : Branch-end SRX Series devics

Answer: A,C,D

Question 3

Click the Exhibit button.

2021-04-27-22-23-17-3d4ddcb379cef75d65c8f83ed91c42db

Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)

Options :

A : Topology 3

B : Topology 5

C : Topology 2

D : Topology 4

E : Topology 1

Answer: A,D

Question 4

Exhibit:

Referring to the exhibit, your company’s infrastructure team implemented new printers To make sure that the policy enforcer pushes the updated Ip address list to the SRX. Which three actions are required to complete the requirement? (Choose three )

Options :

A : Configure the server feed URL as http://172.25.10.254/myprinters

B : Create a security policy that uses the dynamic address feed to allow access

C : Configure Security Director to create a dynamic address feed

D : Configure Security Director to create a C&C feed.

E : Configure server feed URL as https://172.25.10.254/myprinters.

Answer: A,B,C

Question 5

Exhibit

The show network-access aaa radius-servers command has been issued to solve authentication issues. Referring to the exhibit, to which two authentication servers will the SRX Series device continue to send requests? (Choose TWO)

Options :

A : 200l:DB8:0:f101;:2

B : 192.168.30.191

C : 192.168.30.190

D : 192.168.30.188

Answer: B,C

Higher Test Marks with Free Online JN0-636 Exam Practice

Buying Options: