New Release JN0-636 JNCIP-SEC Questions

Security Professional (JNCIP-SEC) Questions and Answers

Question 13

You have noticed a high number of TCP-based attacks directed toward your primary edge device. You are asked to

configure the IDP feature on your SRX Series device to block this attack.

Which two IDP attack objects would you configure to solve this problem? (Choose two.)

Network

Signature

Protocol anomaly

host

Question 14

Regarding IPsec CoS-based VPNs, what is the number of IPsec SAs associated with a peer based upon?

The number of traffic selectors configured for the VPN.

The number of CoS queues configured for the VPN.

The number of classifiers configured for the VPN.

The number of forwarding classes configured for the VPN.

Question 15

Exhibit.

Referring to the exhibit, which two statements are true? (Choose two.)

The c-1 TSYS has a reservation for the security flow resource.

The c-1 TSYS can use security flow resources up to the system maximum.

The c-1 TSYS cannot use any security flow resources.

The c-1 TSYS has no reservation for the security flow resource.

Question 16

Click the Exhibit button.

Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)

Topology 3

Topology 5

Topology 2

Topology 4

Topology 1