Juniper Juniper Certifications JN0-634 Questions & Answers

• Question 31:

  Which statement about transparent mode on an SRX340 is true?

  A. You must reboot the device after configuring transparent mode.

  B. Security policies applied to transparent mode zones require Layer 2 address matching.

  C. Screens are not supported in transparent mode security zones.

  D. All interfaces on the device must be configured with the ethernet-switching protocol family.

  Correct Answer: A

• Question 32:

  While reviewing the Log and Reporting portion of Security Director, you find that multiple objects reference the same address. You want to use a standardized name for all of the objects.

  In this scenario, how would you create a standardized object name without searching the entire policy?

  A. Remove the duplicate objects.

  B. Merge the duplicate objects.

  C. Rename the duplicate objects.

  D. Replace the duplicate objects.

  Correct Answer: B

• Question 33:

  Which three components are part of the AppSecure services suite? (Choose three.)

  A. IDP

  B. Sky ATP

  C. AppQoS

  D. AppFW

  E. Web filtering

  Correct Answer: ACD

• Question 34:

  SRX Series devices with AppSecure support which three custom signatures? (Choose three.)

  A. MAC address-based mapping

  B. latency detection mapping

  C. IP protocol-based mapping

  D. ICMP-based mapping

  E. Layer 7-based signatures

  Correct Answer: CDE

• Question 35:

  Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high available chassis cluster and are configured for IPS. There has been a node failover.

  In this scenario, which two statements are true? (Choose two.)

  A. The IP action table is synchronized between the chassis cluster nodes.

  B. Cached SSL session ID information for existing sessions is not synchronized between nodes.

  C. The IP action table is not synchronized between the chassis cluster nodes.

  D. Cached SSL session ID information for existing session is synchronized between nodes.

  Correct Answer: CD

• Question 36:

  Click the Exhibit button.

  

  Referring to the exhibit, which statement is true?

  A. E-mails from the user@example.com address are marked with SPAM in the subject line by the spam block list server.

  B. E-mails from the user@example.com address are blocked by the spam list server.

  C. E-mails from the user@example.com address are blocked by the reject blacklist.

  D. E-mails from the user@example.com address are allowed by the allow whitelist.

  Correct Answer: D

• Question 37:

  Which two parameters are required to match in an IDP rule for the terminal option to take effect? (Choose two.)

  A. attacks custom-attacks

  B. attacks predefined-attacks

  C. application

  D. source-address

  Correct Answer: AB

• Question 38:

  Click the Exhibit button.

  

  According to the policy shown in the exhibit, which application-services traffic will be processed first?

  A. the application traffic matchings the IDP rules

  B. the application traffic matchings the utm-policy log rule set

  C. the application traffic matchings the utm-policy wf-policy_websense-home rules

  D. the application traffic matchings the application-firewall rule-set demo-tracking_1 rule

  Correct Answer: A

• Question 39:

  Your manager has notices a drop in productivity and believes it is due to employees checking their social media feeds too frequently. You are asked to provide analytical statistics for this traffic within your network on an hourly basis.

  Which AppSecure feature should be used to collect this information?

  A. AppQoS

  B. AppFW

  C. AppTrack

  D. APBR

  Correct Answer: C

• Question 40:

  Click the Exhibit button.

  

  The UTM policy shown in the exhibit has been applied to a security policy on a branch SRX Series device. In this scenario, which statement is true?

  A. HTTP downloads of ZIP files will be blocked.

  B. FTP downloads of ZIP files will be blocked.

  C. E-mail downloads of ZIP files will be blocked.

  D. ZIP files can be renamed with a new extension to pass through the filter.

  Correct Answer: A