All About Printable Jn0-634 Practice Exam

NEW QUESTION 1
Click the Exhibit button.

Referring to the configuration shown in the exhibit, which statement explains why traffic matching the IDP signature DNS:OVERFLOW:TOO-LONG-TCP-MSG is not being stopped by the SRX Series device?

• A. The security policy dmz-pol1 has an action of permit.
• B. The IDP policy idp-pol1 is not configured as active.
• C. The IDP rule r2 has an ip-action value of notify.
• D. The IDP rule r1 has an action of ignore-connection.

Answer: B

NEW QUESTION 2
Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high availability chassis cluster and are configured for IPS. There has been a node failover.
In this scenario, which statement is true?

• A. Existing sessions continue to be processed by IPS because of table synchronization.
• B. Existing sessions are no longer processed by IPS and become firewall sessions.
• C. Existing session continue to be processed by IPS as long as GRES is configured.
• D. Existing sessions are dropped and must be reestablished so IPS processing can occur.

Answer: A

NEW QUESTION 3
Which Junos security feature is used for signature-based attack prevention?

• A. RADIUS
• B. AppQoS
• C. IPS
• D. PIM

Answer: C

NEW QUESTION 4
Your network includes SRX Series devices at all headquarter, data center, and branch locations. The headquarter and data center locations use high-end SRX Series devices, and the branch locations use branch SRX Series devices. You are asked to deploy IPS on the SRX Series devices using one of the available IPS deployment modes.
In this scenario, which two statements are true? (Choose two.)

• A. Inline tap mode provides enforcement.
• B. Inline tap mode can be used at all locations.
• C. Integrated mode can be used at all locations.
• D. Integrated mode provides enforcement.

Answer: CD

NEW QUESTION 5
Which two statements about the integrated user firewall feature of the Junos OS are true? (Choose two.)

• A. The maximum number of supported active directory servers is ten.
• B. IPv6 addresses are not supported.
• C. The maximum number of supported active directory servers is five.
• D. IPv6 addresses are supported.

Answer: AB

NEW QUESTION 6
Click the Exhibit button.

Security Director is reporting the events shown in the exhibit.
If the fallback parameter is set to pass traffic, what would cause the events?

• A. The files are too large for the antivirus engine to process.
• B. The files are not scanned because they were permitted by a security policy.
• C. The files are not scanned because they are the wrong file format.
• D. The antivirus engine is unable to re-encrypt the files.

Answer: A

NEW QUESTION 7
You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restarted to the VLANs from which they originate.
Which configuration accomplishes these objectives?

• A. bridge {block-non-ip-all;bpdu-vlan-flooding;}
• B. bridge {block-non-ip-all;bypass-non-ip-unicast;no-packet-flooding;}
• C. bridge {bypass-non-ip-unicast;bpdu-vlan-flooding;}
• D. bridge {block-non-ip-all;bypass-non-ip-unicast;bpdu-vlan-flooding;}

Answer: A

NEW QUESTION 8
You need to add all of the sites in the domain example.com to urllist2. You decide to use wildcards to account for any changes made to the domain in the future.
In this scenario, which two commands would you use to meet this requirement? (Choose two.)

• A. set custom-objects url-pattern urllist2 value http://*.example.com
• B. set custom-objects url-pattern urllist2 value http://*example.com
• C. set custom-objects url-pattern urllist2 value http://*.example.???
• D. set custom-objects url-pattern urllist2 value http://*.example.*

Answer: AC

NEW QUESTION 9
Which three components are part of the AppSecure services suite? (Choose three.)

• A. IDP
• B. Sky ATP
• C. AppQoS
• D. AppFW
• E. Web filtering

Answer: ACD

NEW QUESTION 10
Click the Exhibit button.

You have recently committed the IPS policy shown in the exhibit. When evaluating the expected behavior, you notice that you have a session that matches all of the rules in your IPS policy.
In this scenario, which action would be taken?

• A. ignore-connection
• B. drop packet
• C. no-action
• D. close-client-and-server

Answer: C

NEW QUESTION 11
Click the Exhibit button.

Two hosts on the same subnet are connected to an SRX340 using interfaces ge-0/0/4 and
ge-0/0/5. The two hosts can communicate with each other, but they cannot communicate with hosts outside of their subnet.
Referring to the exhibit, which three actions would you take to solve this problem? (Choose three.)

• A. Add the ge-0/0/4 and ge-0/0/5 interfaces to the L2 zone.
• B. Remove the irb.0 interface from the L2 zone.
• C. Set the SRX340 to Ethernet switching mode.
• D. Configure a security policy to permit the traffic.
• E. Reboot the SRX340.

Answer: CDE

NEW QUESTION 12
Click the Exhibit button.

Referring to the exhibit, you have expanded the disk storage size in ESXi for your log collector from 500 GB to 600 GB. However, your log collector’s disk size has not changed.
Given the scenario, which two statements are true? (Choose two.)

• A. You must run a script from the console to expand the disk size.
• B. The ESXi storage parameter is not associated with the Elasticsearch disk size parameter.
• C. You must reboot the log collector for storage settings to be updated
• D. You must re-run the log collector setup script to update the storage settings.

Answer: AC

NEW QUESTION 13
What are three types of content that are filtered by the Junos UTM feature set? (Choose three.)

• A. IMAP
• B. HTTP
• C. SIP
• D. SSL
• E. FTP

Answer: ABE

NEW QUESTION 14
You have implemented APBR on your SRX Series device and are verifying that your changes are working properly. You notice that when you start the application for the first time, it does not follow the expected path.
What are two reasons that would cause this behavior? (Choose two.)

• A. The application system cache does not have an entry for the first session.
• B. The application system cache has been disabled.
• C. The application system cache already has an entry for this application.
• D. The advanced policy-based routing is applied to the ingress zone and must be moved to the egress zone.

Answer: AB

NEW QUESTION 15
Click the Exhibit button.

You have configured integrated user firewall on the SRX Series devices in your network. However, you noticed that no users can access the servers that are behind the SRX Series devices.
Referring to the exhibit, what is the problem?

• A. The Kerberos service is not configured correctly on the Active Directory server.
• B. There are no authentication entries in the SRX Series device for the users.
• C. The security policy on the SRX Series device is configured incorrectly.
• D. The SAML service is not configured correctly on the Active Directory server.

Answer: C

NEW QUESTION 16
Which feature of Sky ATP is deployed with Software-Defined Secure Networks?

• A. zero-day threat mitigation
• B. software image snapshot support
• C. device inventory management
• D. service redundancy daemon configuration support

Answer: A

NEW QUESTION 17
Click the Exhibit button.

Your organization requests that you direct Facebook traffic out a different link to ensure that the bandwidth for critical applications is protected.
Referring to the exhibit, which forwarding instance will be used on your SRX Series device?

• A. R3
• B. R1
• C. R2
• D. inet.0

Answer: C

NEW QUESTION 18
Which statement about transparent mode on an SRX340 is true?

• A. You must reboot the device after configuring transparent mode.
• B. Security policies applied to transparent mode zones require Layer 2 address matching.
• C. Screens are not supported in transparent mode security zones.
• D. All interfaces on the device must be configured with the ethernet-switching protocol family.

Answer: A

NEW QUESTION 19
Using content filtering on an SRX Series device, which three types of HTTP content are able to be blocked? (Choose three.)

• A. PDF files
• B. ZIP files
• C. Java applets
• D. Active X
• E. Flash

Answer: BCD

NEW QUESTION 20
Click the Exhibit button.

Which statement explains the current state value of the command output shown in the exhibit?

• A. A valid response was received from a domain PC probe, and the user is a valid domain user programmed in the PFE.
• B. An invalid response was received from a domain PC probe, and the user is an invalid domain user.
• C. A probe event generated an entry in the authentication table, but no probe response has been received from the domain PC.
• D. The user-to-address mapping was successfully read from the domain controller event logs, and an entry was added to the authentication table witch currently resides on the Routing Engine.

Answer: A

NEW QUESTION 21
Your manager has notices a drop in productivity and believes it is due to employees checking their social media feeds too frequently. You are asked to provide analytical statistics for this traffic within your network on an hourly basis.
Which AppSecure feature should be used to collect this information?

• A. AppQoS
• B. AppFW
• C. AppTrack
• D. APBR

Answer: C

NEW QUESTION 22
Your manager has identified that employees are spending too much time posting on a social media site. You are asked to block user from posting on this site, but they should still be able to access any other site on the Internet.
In this scenario, which AppSecure feature will accomplish this task?

• A. AppQoS
• B. AppTrack
• C. APpFW
• D. APBR

Answer: C

NEW QUESTION 23
The Software-Defined Secure Networks Policy Enforcer contains which two components? (Choose two.)

• A. SRX Series device
• B. Sky ATP
• C. Policy Controller
• D. Feed Connector

Answer: CD

NEW QUESTION 24
While reviewing the Log and Reporting portion of Security Director, you find that multiple objects reference the same address. You want to use a standardized name for all of the objects.
In this scenario, how would you create a standardized object name without searching the entire policy?

• A. Remove the duplicate objects.
• B. Merge the duplicate objects.
• C. Rename the duplicate objects.
• D. Replace the duplicate objects.

Answer: B

NEW QUESTION 25
......