Juniper Jn0-634 Paper 2021

NEW QUESTION 1
Which feature of Sky ATP is deployed with Software-Defined Secure Networks?

• A. zero-day threat mitigation
• B. software image snapshot support
• C. device inventory management
• D. service redundancy daemon configuration support

Answer: A

NEW QUESTION 2
What is the required when deploying a log collector in Junos Space?

• A. root user access to the log collector
• B. a shared log file directory on the log collector
• C. the IP address of interface eth1 on the log collector
• D. a distributed deployment of the log collector nodes

Answer: A

NEW QUESTION 3
Click the Exhibit button.

Security Director is reporting the events shown in the exhibit.
If the fallback parameter is set to pass traffic, what would cause the events?

• A. The files are too large for the antivirus engine to process.
• B. The files are not scanned because they were permitted by a security policy.
• C. The files are not scanned because they are the wrong file format.
• D. The antivirus engine is unable to re-encrypt the files.

Answer: A

NEW QUESTION 4
Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high availability chassis cluster and are configured for IPS. There has been a node failover.
In this scenario, which statement is true?

• A. Existing sessions continue to be processed by IPS because of table synchronization.
• B. Existing sessions are no longer processed by IPS and become firewall sessions.
• C. Existing session continue to be processed by IPS as long as GRES is configured.
• D. Existing sessions are dropped and must be reestablished so IPS processing can occur.

Answer: A

NEW QUESTION 5
You want to review AppTrack statistics to determine the characteristics of the traffic being monitored.
Which operational mode command would accomplish this task on an SRX Series device?

• A. show services application-identification statistics applications
• B. show services application-identification application detail
• C. show security application-tracking counters
• D. show services security-intelligence statistics

Answer: A

NEW QUESTION 6
You are creating an IPS policy with multiple rules. You want traffic that matches rule 5 to silently be dropped, along with any future packets that match the appropriate attributes of the incoming traffic.
In this scenario, which ip-action parameter should you use?

• A. ip-block
• B. ip-close
• C. log-create
• D. timeout

Answer: A

NEW QUESTION 7
Your manager has notices a drop in productivity and believes it is due to employees checking their social media feeds too frequently. You are asked to provide analytical statistics for this traffic within your network on an hourly basis.
Which AppSecure feature should be used to collect this information?

• A. AppQoS
• B. AppFW
• C. AppTrack
• D. APBR

Answer: C

NEW QUESTION 8
Which statement about transparent mode on an SRX340 is true?

• A. You must reboot the device after configuring transparent mode.
• B. Security policies applied to transparent mode zones require Layer 2 address matching.
• C. Screens are not supported in transparent mode security zones.
• D. All interfaces on the device must be configured with the ethernet-switching protocol family.

Answer: A

NEW QUESTION 9
You have set up Sky ATP with the SRX Series devices in your network. However, your SRX Series devices are unable to communicate with the Sky ATP cloud because the communication is being blocked by a gateway network device.
Which two actions should you take to solve the problem? (Choose two.)

• A. Open destination port 443 inbound from the Internet on the gateway network device.
• B. Open destination port 8080 outbound from the Internet on the gateway network device.
• C. Open destination port 443 outbound from the Internet on the gateway network device.
• D. Open destination port 8080 inbound from the Internet on the gateway network device.

Answer: CD

NEW QUESTION 10
Click the Exhibit button.

You have configured integrated user firewall on the SRX Series devices in your network. However, you noticed that no users can access the servers that are behind the SRX Series devices.
Referring to the exhibit, what is the problem?

• A. The Kerberos service is not configured correctly on the Active Directory server.
• B. There are no authentication entries in the SRX Series device for the users.
• C. The security policy on the SRX Series device is configured incorrectly.
• D. The SAML service is not configured correctly on the Active Directory server.

Answer: C

NEW QUESTION 11
After using Security Director to add a new firewall policy rule on an SRX Series device, you notice that the hit count on the policy is not increasing. Upon further investigation, you find that the devices listed in the new rule are able to communicate as expected. Your firewall policy consists of hundreds of rules.
Using only Security Director, how do you find the rule that is allowing the communication to occur in this scenario?

• A. Generate a Top Firewall Rules report.
• B. Generate a Policy Analysis report.
• C. Generate a Top Source IPs report.
• D. Generate a Top Firewall Events report.

Answer: D

NEW QUESTION 12
Click the Exhibit button.

Referring to the exhibit, you have expanded the disk storage size in ESXi for your log collector from 500 GB to 600 GB. However, your log collector’s disk size has not changed.
Given the scenario, which two statements are true? (Choose two.)

• A. You must run a script from the console to expand the disk size.
• B. The ESXi storage parameter is not associated with the Elasticsearch disk size parameter.
• C. You must reboot the log collector for storage settings to be updated
• D. You must re-run the log collector setup script to update the storage settings.

Answer: AC

NEW QUESTION 13
A customer has recently deployed a next-generation firewall, sandboxing software, cloud access security brokers (CASB), and endpoint protection.
In this scenario, which tool would provide the customer with additional attack prevention?

• A. Junos Space Cross Provisioning Platform
• B. Contrail
• C. Security Director Policy Enforcer
• D. Network Director Inventory Manager

Answer: C

NEW QUESTION 14
Click the Exhibit button.

Which statement explains the current state value of the command output shown in the exhibit?

• A. A valid response was received from a domain PC probe, and the user is a valid domain user programmed in the PFE.
• B. An invalid response was received from a domain PC probe, and the user is an invalid domain user.
• C. A probe event generated an entry in the authentication table, but no probe response has been received from the domain PC.
• D. The user-to-address mapping was successfully read from the domain controller event logs, and an entry was added to the authentication table witch currently resides on the Routing Engine.

Answer: A

NEW QUESTION 15
Click the Exhibit button.

A customer submits a service ticket complaining that access to http://www.example.com/ has been blocked.
Referring to the log message shown in the exhibit, why was access blocked?

• A. All illegal source port was utilized.
• B. The URI matched a profile entry.
• C. The user/role permissions were exceeded.
• D. There was a website category infraction.

Answer: B

NEW QUESTION 16
You are scanning files that are being transferred from the Internet to hosts on your internal network with Sky ATP. However, you notice that files that are 1 GB in size are not being scanned by Sky ATP.
In this scenario, which two statements are true? (Choose two.)

• A. The Sky ATP failback option is set to permit.
• B. The Sky ATP engine or the SRX Series device is too busy.
• C. The 1 GB file size is larger than the scan size limit for Sky ATP.
• D. The Sky ATP policy on the SRX Series device is misconfigured.

Answer: CD

NEW QUESTION 17
What is a function of UTM?

• A. AppFW
• B. IPsec
• C. content filtering
• D. bridge mode

Answer: C

NEW QUESTION 18
Click the Exhibit button.

You are trying to implement secure wire on your SRX Series device. However, you are receiving the commit error shown in the exhibit.
What must you do to solve the problem?

• A. Add the correct logical units to the interfaces in the secure wire.
• B. Put the ge-0/0/4 and ge-0/0/5 interfaces in separate secure wires.
• C. Change the Ethernet switching mode from access to trunk for the ge-0/0/4 and ge-0/0/5 interfaces.
• D. Add the ge-0/0/4 and ge-0/0/5 interfaces to the SV VLAN.

Answer: A

NEW QUESTION 19
Click the Exhibit button.

Referring to the exhibit, the host has been automatically blocked from communicating on the network because a malicious file was downloaded. You cleaned the infected host and changed the investigation status to Resolved – Fixed.
What does Sky ATP do if the host then attempts to download a malicious file that would result in a threat score of 10?

• A. Sky ATP does not log the connection attempt and an SRX Series device does not allow the host to communicate on the network.
• B. Sky ATP logs the connection attempt and an SRX Series device does not allow the host to communicate on the network.
• C. Sky ATP logs the connection attempt and an SRX Series device allows the host to communicate on the network.
• D. Sky ATP does not log the connection attempt and an SRX Series device allows the host to communicate on the network.

Answer: C

NEW QUESTION 20
Click the Exhibit button.

Referring to the configuration shown in the exhibit, which statement explains why traffic matching the IDP signature DNS:OVERFLOW:TOO-LONG-TCP-MSG is not being stopped by the SRX Series device?

• A. The security policy dmz-pol1 has an action of permit.
• B. The IDP policy idp-pol1 is not configured as active.
• C. The IDP rule r2 has an ip-action value of notify.
• D. The IDP rule r1 has an action of ignore-connection.

Answer: B

NEW QUESTION 21
Which two parameters are required to match in an IDP rule for the terminal option to take effect? (Choose two.)

• A. attacks custom-attacks
• B. attacks predefined-attacks
• C. application
• D. source-address

Answer: AB

NEW QUESTION 22
Click the Exhibit button.

You have enabled mixed mode on an SRX Series device. You are unable to commit the configuration shown in the exhibit.
What is the problem in this scenario?

• A. A Layer 3 interface has not been configured on VLAN v10.
• B. The trust zone cannot contain both Layer 2 and Layer 3 interfaces.
• C. STP is not enabled under the host-inbound-traffic system services hierarchy on the trust and protected security zones.
• D. An IRB interface has not been configured.

Answer: B

NEW QUESTION 23
Your network includes SRX Series devices configured with AppSecure.
Which two statements regarding the application identification engine are true? (Choose two.)

• A. Applications are only matched in traffic flows associated with client-to-server sessions.
• B. Applications are matched in traffic flows associated with client-to-server and server-to- client sessions.
• C. If the packets entering the engine match a known application, then processing continues.
• D. If the packets entering the engine match a known application, then processing stops.

Answer: BD

NEW QUESTION 24
You have implemented APBR on your SRX Series device and are verifying that your changes are working properly. You notice that when you start the application for the first time, it does not follow the expected path.
What are two reasons that would cause this behavior? (Choose two.)

• A. The application system cache does not have an entry for the first session.
• B. The application system cache has been disabled.
• C. The application system cache already has an entry for this application.
• D. The advanced policy-based routing is applied to the ingress zone and must be moved to the egress zone.

Answer: AB

NEW QUESTION 25
Which interface family is required for Layer 2 transparent mode on SRX Series devices?

• A. LLDP
• B. Ethernet switching
• C. inet
• D. VPLS

Answer: B

NEW QUESTION 26
......