Virtual jn0-634 Study Guides 2021

NEW QUESTION 1
Click the Exhibit button.

You have recently committed the IPS policy shown in the exhibit. When evaluating the expected behavior, you notice that you have a session that matches all of the rules in your IPS policy.
In this scenario, which action would be taken?

• A. ignore-connection
• B. drop packet
• C. no-action
• D. close-client-and-server

Answer: C

NEW QUESTION 2
Your network includes SRX Series devices at all headquarter, data center, and branch locations. The headquarter and data center locations use high-end SRX Series devices, and the branch locations use branch SRX Series devices. You are asked to deploy IPS on the SRX Series devices using one of the available IPS deployment modes.
In this scenario, which two statements are true? (Choose two.)

• A. Inline tap mode provides enforcement.
• B. Inline tap mode can be used at all locations.
• C. Integrated mode can be used at all locations.
• D. Integrated mode provides enforcement.

Answer: CD

NEW QUESTION 3
Click the Exhibit button.

Referring to the security policy shown in the exhibit, which two actions will happen as the packet is processed? (Choose two.)

• A. It passes unmatched traffic after modifying the DSCP priority.
• B. It marks and passes matched traffic with a high DSCP priority.
• C. It marks and passes matched traffic with a low DSCP priority.
• D. It passes unmatched traffic without modifying DSCP priority.

Answer: BD

NEW QUESTION 4
You are implementing user authentication on your network using an SRX Series device and want to ensure that there are redundant forms of authentication for users to access the network. You have configured the device with the integrated user firewall and user role firewall features. You are testing failover methods using the default priority values.
In this scenario, which two statements are true? (Choose two.)

• A. If the user fails local authentication, then the Junos OS will attempt to authenticate the user with a user role firewall.
• B. If the user fails user role firewall authentication, then the Junos OS will attempt to authenticate the user with an integrated user firewall.
• C. If the user fails integrated user firewall authentication, then the Junos OS will attempt toauthenticate with a user role firewall.
• D. If the user fails local authentication, then the Junos OS will attempt to authenticate the user with an integrated user firewall.

Answer: CD

NEW QUESTION 5
Which interface family is required for Layer 2 transparent mode on SRX Series devices?

• A. LLDP
• B. Ethernet switching
• C. inet
• D. VPLS

Answer: B

NEW QUESTION 6
Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high availability chassis cluster and are configured for IPS. There has been a node failover.
In this scenario, which statement is true?

• A. Existing sessions continue to be processed by IPS because of table synchronization.
• B. Existing sessions are no longer processed by IPS and become firewall sessions.
• C. Existing session continue to be processed by IPS as long as GRES is configured.
• D. Existing sessions are dropped and must be reestablished so IPS processing can occur.

Answer: A

NEW QUESTION 7
To which three UTM components would the custom-objects parameter apply? (Choose three.)

• A. Sky ATP
• B. antispam
• C. content filtering
• D. antivirus
• E. Web filtering

Answer: BCE

NEW QUESTION 8
You are using IDP on your SRX Series device and are asked to ensure that the SRX Series device has the latest IDP database, as well as the latest application signature database.
In this scenario, which statement is true?

• A. The application signature database cannot be updated on a device with the IDP database installed.
• B. You must download each database separately.
• C. The IDP database includes the latest application signature database.
• D. You must download the application signature database before installing the IDP database.

Answer: C

NEW QUESTION 9
Which statement about transparent mode on an SRX340 is true?

• A. You must reboot the device after configuring transparent mode.
• B. Security policies applied to transparent mode zones require Layer 2 address matching.
• C. Screens are not supported in transparent mode security zones.
• D. All interfaces on the device must be configured with the ethernet-switching protocol family.

Answer: A

NEW QUESTION 10
Your manager has identified that employees are spending too much time posting on a social media site. You are asked to block user from posting on this site, but they should still be able to access any other site on the Internet.
In this scenario, which AppSecure feature will accomplish this task?

• A. AppQoS
• B. AppTrack
• C. APpFW
• D. APBR

Answer: C

NEW QUESTION 11
You have set up Sky ATP with the SRX Series devices in your network. However, your SRX Series devices are unable to communicate with the Sky ATP cloud because the communication is being blocked by a gateway network device.
Which two actions should you take to solve the problem? (Choose two.)

• A. Open destination port 443 inbound from the Internet on the gateway network device.
• B. Open destination port 8080 outbound from the Internet on the gateway network device.
• C. Open destination port 443 outbound from the Internet on the gateway network device.
• D. Open destination port 8080 inbound from the Internet on the gateway network device.

Answer: CD

NEW QUESTION 12
Which browser is supported by Security Director with Logging and Reporting?

• A. Firefox
• B. Agora
• C. PowerBrowser
• D. Mosaic

Answer: A

NEW QUESTION 13
Click the Exhibit button.

You have configured integrated user firewall on the SRX Series devices in your network. However, you noticed that no users can access the servers that are behind the SRX Series devices.
Referring to the exhibit, what is the problem?

• A. The Kerberos service is not configured correctly on the Active Directory server.
• B. There are no authentication entries in the SRX Series device for the users.
• C. The security policy on the SRX Series device is configured incorrectly.
• D. The SAML service is not configured correctly on the Active Directory server.

Answer: C

NEW QUESTION 14
Click the Exhibit button.

The UTM policy shown in the exhibit has been applied to a security policy on a branch SRX Series device.
In this scenario, which statement is true?

• A. HTTP downloads of ZIP files will be blocked.
• B. FTP downloads of ZIP files will be blocked.
• C. E-mail downloads of ZIP files will be blocked.
• D. ZIP files can be renamed with a new extension to pass through the filter.

Answer: A

NEW QUESTION 15
After downloading the new IPS attack database, the installation of the new database fails. What caused this condition?

• A. The new attack database no longer contained an attack entry that was in use.
• B. The new attack database was revoked between the time it was downloaded and installed.
• C. The new attack database was too large for the device on which it was being installed.
• D. Some of the new attack entries were already in use and had to be deactivated before installation.

Answer: A

NEW QUESTION 16
What is the required when deploying a log collector in Junos Space?

• A. root user access to the log collector
• B. a shared log file directory on the log collector
• C. the IP address of interface eth1 on the log collector
• D. a distributed deployment of the log collector nodes

Answer: A

NEW QUESTION 17
Which three components are part of the AppSecure services suite? (Choose three.)

• A. IDP
• B. Sky ATP
• C. AppQoS
• D. AppFW
• E. Web filtering

Answer: ACD