How to pass JN0-696 exam easily? GreatExam is now here to help you with your JN0-696 exam certification problems. Because we are the best JN0-696 exam questions training material providing vendor, all of our candidates get through JN0-696 exam without any problem.
QUESTION 41
Click the Exhibit button. You are implementing a high availability chassis cluster on an SRX Series device. You would like to manage both devices through the J-Web utility. However, when you try to log in to the second device using SSL HTTP, you receive a message from your Web browser indicating that the message has timed out.
Why you are receiving this message?
A. There is a firewall policy blocking traffic to the control plane.
B. HTTP is not configured as host inbound traffic.
C. The incoming traffic is not being allowed on the correct port.
D. The rdp daemon is on standby on the secondary device.
Answer: A
QUESTION 42
A customer downloaded and installed the IDP policy template. After copying the recommended templates and creating the needed policy, the customer deleted the templates.
After the commit, the templates return.
Which command will prevent the templates from appearing again?
A. user@srx# deactivate security idp active-policy Recommended
B. user@srx# delete security idp idp-policy Recommended
C. user@srx# set security idp security-package automatic
D. user@srx# deactivate system scripts commit file templates.xsl
Answer: D
Explanation:
Delete or deactivate the commit script file. By deleting the commit script file, you avoid the risk of overwriting modifications to the template when you commit the configuration. Run one of the following commands:
user@host# delete system scripts commit file templates.xsl
user@host# deactivate system scripts commit file templates.xsl
http://www.juniper.net/documentation/en_US/junos12.1×47/topics/task/configuration/idp-predefined-policytemplate-downloading-and-using-cli.html
QUESTION 43
You have an SRX branch device with two ISP connections. During analysis of the traffic, you notice that traffic from internal users to ISP 1 are replied to by ISP 2.
Which two configurations will correct the asymmetric problem? (Choose two.)
A. Create a security policy to allow traffic through ISP 1 only.
B. Create routing instances that include routes to ISP 1 and ISP 2.
C. Configure filter-based forwarding to provide load balancing.
D. Create an interface-specific firewall filter to forward the traffic to ISP 1.
Answer: AB
QUESTION 44
You are asked to update the IDP signature database. After you issue the request security IDP security-package download command, you need to monitor the process.
Which command would you use to accomplish this task?
A. request security idp security-package download status
B. request security idp security-package download full-update
C. request security idp security-package install
D. request security idp security-package install status
Answer: A
Explanation:
Use the following command: root# run request security idp security-package download status
https://kb.juniper.net/InfoCenter/index?page=content&id=KB28004&actp=search
QUESTION 45
You are requested to verify that the UTM service is running on the SRX Series device.
Which command will accomplish this task?
A. show security utm status
B. run show security utm web-filtering statistics
C. run show security utm status
D. show security utm session
Answer: A
Explanation:
To verify the UTM service status, from operational mode, enter the show security utm status command.
http://www.juniper.net/documentation/en_US/junos12.1×47/topics/example/security-utm-enhanced-webfiltering-site-reputation-action-configuring.html
QUESTION 46
Click the Exhibit button. You are reviewing the status of a high-end SRX Series chassis cluster and notice that some interfaces have error messages.
Referring to the exhibit, which two steps would you use to troubleshoot the problem? (Choose two.)
A. Verify the security policies for incoming traffic.
B. Verify if there are Layer 1 or Layer 2 issues between the node devices.
C. Recognize the control link port to a different Services Processing Card (SPC), move the cable, and rebootboth nodes.
D. Reconfigure the firewall filters to allow traffic.
Answer: BC
Explanation:
B: If the Control Link is SFP-type port, change the transceiver on both ends. Ensure that the transceivers are same type (LX, SX, etc.) and that they are Juniper-branded parts.
C: Change the cable that you are using for control link. Is the interface link light GREEN now?
Yes – Previous link cable was faulty. Recommend to now reboot both the nodes simultaneously.
http://kb.juniper.net/InfoCenter/index?page=content&id=kb20698&actp=search
If you want to get more JN0-696 exam study guide, you can download the free JN0-696 braindumps in PDF files on GreatExam. It would be great help for your exam. As a professional IT exam study material provider, GreatExam.com gives you more than just exam questions and answers. We provide our customers with the most accurate study guide about the exam and the guarantee of pass. You can easily find JN0-696 exam Q&As on our site. All the study guide provided by us are selected by experts in this field. The questions and answers are very easy to understand, and they’re especially great for professionals who have really little time to focus on exam preparations for certifications, due to their work and other private commitments.
http://www.greatexam.com/jn0-696-exam-questions.html
