Juniper Juniper Certifications JN0-634 Questions & Answers

• Question 51:

  You have configured a log collector VM and Security Director. System logging is enabled on a branch SRX Series device, but security logs do not appear in the monitor charts.

  How would you solve this problem?

  A. Configure a security policy to forward logs to the collector.

  B. Configure application identification on the SRX Series device.

  C. Configure security logging on the SRX Series device.

  D. Configure J-Flow on the SRX Series device.

  Correct Answer: C

• Question 52:

  You have been notified by your colocation provider that your infrastructure racks will no longer be adjacent to each other.

  In this scenario, which technology would you use to secure all Layer 2 and Layer 3 traffic between racks?

  A. IPsec

  B. GRE

  C. 802.1BR

  D. MACsec

  Correct Answer: D

• Question 53:

  You need to add all of the sites in the domain example.com to urllist2. You decide to use wildcards to account for any changes made to the domain in the future.

  In this scenario, which two commands would you use to meet this requirement? (Choose two.)

  A. set custom-objects url-pattern urllist2 value http://*.example.com

  B. set custom-objects url-pattern urllist2 value http://*example.com

  C. set custom-objects url-pattern urllist2 value http://*.example.???

  D. set custom-objects url-pattern urllist2 value http://*.example.*

  Correct Answer: AC

• Question 54:

  What is a function of UTM?

  A. AppFW

  B. IPsec

  C. content filtering

  D. bridge mode

  Correct Answer: C

• Question 55:

  You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restarted to the VLANs from which they originate.

  Which configuration accomplishes these objectives?

  A. bridge { block-non-ip-all; bpdu-vlan-flooding; }

  B. bridge { block-non-ip-all; bypass-non-ip-unicast; no-packet-flooding; }

  C. bridge { bypass-non-ip-unicast; bpdu-vlan-flooding; }

  D. bridge { block-non-ip-all; bypass-non-ip-unicast; bpdu-vlan-flooding; }

  Correct Answer: A

• Question 56:

  Which AppSecure feature identifies applications that are present in traffic?

  A. AppID

  B. AppTrack

  C. AppFW

  D. AppQoS

  Correct Answer: A

• Question 57:

  What is the correct application mapping sequence when a user goes to Facebook for the first time through an SRX Series device?

  A. first packet > process packet > check application system cache > classify application > process packet > match and identify application

  B. first packet > check application system cache > process packet > classify application > match and identify application

  C. first packet > check application system cache > classify application > process packet > match and identify application

  D. first packet > process packet > check application system cache > classify application > match and identify application

  Correct Answer: D

• Question 58:

  You want to review AppTrack statistics to determine the characteristics of the traffic being monitored. Which operational mode command would accomplish this task on an SRX Series device?

  A. show services application-identification statistics applications

  B. show services application-identification application detail

  C. show security application-tracking counters

  D. show services security-intelligence statistics

  Correct Answer: A

• Question 59:

  Click the Exhibit button.

  

  You are trying to implement secure wire on your SRX Series device. However, you are receiving the commit error shown in the exhibit.

  What must you do to solve the problem?

  A. Add the correct logical units to the interfaces in the secure wire.

  B. Put the ge-0/0/4 and ge-0/0/5 interfaces in separate secure wires.

  C. Change the Ethernet switching mode from access to trunk for the ge-0/0/4 and ge-0/0/5 interfaces.

  D. Add the ge-0/0/4 and ge-0/0/5 interfaces to the SV VLAN.

  Correct Answer: A

• Question 60:

  Click the Exhibit button.

  

  Referring to the exhibit, which two statements are true? (Choose two.)

  A. You can secure inter-VLAN traffic with a security policy on this device.

  B. You can secure intra-VLAN traffic with a security policy on this device.

  C. The device can pass Layer 2 and Layer 3 traffic at the same time.

  D. The device cannot pass Layer 2 and Layer 3 traffic at the same time.

  Correct Answer: AC