Juniper Juniper Certifications JN0-634 Questions & Answers

• Question 41:

  What is the required when deploying a log collector in Junos Space?

  A. root user access to the log collector

  B. a shared log file directory on the log collector

  C. the IP address of interface eth1 on the log collector

  D. a distributed deployment of the log collector nodes

  Correct Answer: A

• Question 42:

  Click the Exhibit button.

  

  You have recently committed the IPS policy shown in the exhibit. When evaluating the expected behavior, you notice that you have a session that matches all of the rules in your IPS policy.

  In this scenario, which action would be taken?

  A. ignore-connection

  B. drop packet

  C. no-action

  D. close-client-and-server

  Correct Answer: C

• Question 43:

  Click the Exhibit button.

  

  Your organization requests that you direct Facebook traffic out a different link to ensure that the bandwidth for critical applications is protected.

  Referring to the exhibit, which forwarding instance will be used on your SRX Series device?

  A. R3

  B. R1

  C. R2

  D. inet.0

  Correct Answer: C

• Question 44:

  Click the Exhibit button.

  

  Referring to the exhibit, you have expanded the disk storage size in ESXi for your log collector from 500 GB to 600 GB. However, your log collector's disk size has not changed.

  Given the scenario, which two statements are true? (Choose two.)

  A. You must run a script from the console to expand the disk size.

  B. The ESXi storage parameter is not associated with the Elasticsearch disk size parameter.

  C. You must reboot the log collector for storage settings to be updated

  D. You must re-run the log collector setup script to update the storage settings.

  Correct Answer: AC

• Question 45:

  You are creating an IPS policy with multiple rules. You want traffic that matches rule 5 to silently be dropped, along with any future packets that match the appropriate attributes of the incoming traffic.

  In this scenario, which ip-action parameter should you use?

  A. ip-block

  B. ip-close

  C. log-create

  D. timeout

  Correct Answer: A

• Question 46:

  Using the Policy Controller API, which configuration would post Sky ATP with PE mode to the Policy Enforcer controller configuration?

  "configs": {

  A. "sdsn": false "cloudonly": true }

  B. "configs": { "sdsn": false "cloud": false } "configs": {

  C. "sdsn": true "cloudonly": false }

  D. "configs": { "sdsn": false "cloud": true }

  Correct Answer: C

• Question 47:

  What are three types of content that are filtered by the Junos UTM feature set? (Choose three.)

  A. IMAP

  B. HTTP

  C. SIP

  D. SSL

  E. FTP

  Correct Answer: ABE

• Question 48:

  You are using IDP on your SRX Series device and are asked to ensure that the SRX Series device has the latest IDP database, as well as the latest application signature database.

  In this scenario, which statement is true?

  A. The application signature database cannot be updated on a device with the IDP database installed.

  B. You must download each database separately.

  C. The IDP database includes the latest application signature database.

  D. You must download the application signature database before installing the IDP database.

  Correct Answer: C

• Question 49:

  Click the Exhibit button.

  

  Which statement explains the current state value of the command output shown in the exhibit?

  A. A valid response was received from a domain PC probe, and the user is a valid domain user programmed in the PFE.

  B. An invalid response was received from a domain PC probe, and the user is an invalid domain user.

  C. A probe event generated an entry in the authentication table, but no probe response has been received from the domain PC.

  D. The user-to-address mapping was successfully read from the domain controller event logs, and an entry was added to the authentication table witch currently resides on the Routing Engine.

  Correct Answer: A

• Question 50:

  Click the Exhibit button.

  

  Referring to the configuration shown in the exhibit, which statement explains why traffic matching the IDP signature DNS:OVERFLOW:TOO-LONG-TCP-MSG is not being stopped by the SRX Series device?

  A. The security policy dmz-pol1 has an action of permit.

  B. The IDP policy idp-pol1 is not configured as active.

  C. The IDP rule r2 has an ip-action value of notify.

  D. The IDP rule r1 has an action of ignore-connection.

  Correct Answer: B