Free Access Juniper.JN0-636.v2023-10-20.q81 Practice Test (Page 11)

Question 46

You have set up Security Director with Policy Enforcer and have configured 12 third-party feeds and a Sky ATP feed. You are also injecting 16 feeds using the available open API. You want to add another compatible feed using the available open API, but Policy Enforcer is not receiving the new feed.
What is the problem in this scenario?

A.You must wait 48 hours for the feed to update

B.You cannot add more than 16 feeds through the available open API

C.You have reached the maximum limit of 29 total feeds

D.You cannot add more than 16 feeds with the available open API

Question 47

Exhibit

The exhibit shows a snippet of a security flow trace.
In this scenario, which two statements are correct? (Choose two.)

A.This packet arrived on interface ge-0/0/4.0.

B.An existing session is found in the table.

C.The capture is a packet from the source address 172.20.101.10 destined to 10.0.1.129.

D.Destination NAT occurs.

Question 48

Referring to the exhibit, an internal host is sending traffic to an Internet host using the 203.0.113.1 reflexive address with source port 54311.
Which statement is correct in this situation?

A.Only the Internet host that the internal host originally communicated with can initiate traffic to reach the internal host using the 203.0.113.1 address, a random source port, and destination port
54311.

B.Any host on the Internet can initiate traffic to reach the internal host using the 203.0.113.1 address, source port 54311, and a random destination port.

C.Any host on the Internet can initiate traffic to reach the internal host using the 203.0.113.1 address, a random source port, and destination port 54311.

D.Only the Internet host that the internal host originally communicated with can initiate traffic to reach the internal host using the 203.0.113.1 address, source port 54311, and a random destination port.

Question 49

You are asked to configure an SRX Series device to bypass all security features for IP traffic from the engineering department.
Which firewall filter will accomplish this task?