Juniper JN0-634 Online Practice Questions and Exam Preparation

Juniper JN0-634 Online Questions & Answers

• Question 1:

  You have implemented APBR on your SRX Series device and are verifying that your changes are working properly. You notice that when you start the application for the first time, it does not follow the expected path. What are two reasons that would cause this behavior? (Choose two.)

  A. The application system cache does not have an entry for the first session.
  B. The application system cache has been disabled.
  C. The application system cache already has an entry for this application.
  D. The advanced policy-based routing is applied to the ingress zone and must be moved to the egress zone.
  A. The application system cache does not have an entry for the first session.
  B. The application system cache has been disabled.

• Question 2:

  SRX Series devices with AppSecure support which three custom signatures? (Choose three.)

  A. MAC address-based mapping
  B. latency detection mapping
  C. IP protocol-based mapping
  D. ICMP-based mapping
  E. Layer 7-based signatures
  C. IP protocol-based mapping
  D. ICMP-based mapping
  E. Layer 7-based signatures

• Question 3:

  Click the Exhibit button.

  

  You have configured integrated user firewall on the SRX Series devices in your network. However, you noticed that no users can access the servers that are behind the SRX Series devices. Referring to the exhibit, what is the problem?

  A. The Kerberos service is not configured correctly on the Active Directory server.
  B. There are no authentication entries in the SRX Series device for the users.
  C. The security policy on the SRX Series device is configured incorrectly.
  D. The SAML service is not configured correctly on the Active Directory server.
  C. The security policy on the SRX Series device is configured incorrectly.

• Question 4:

  To which three UTM components would the custom-objects parameter apply? (Choose three.)

  A. Sky ATP
  B. antispam
  C. content filtering
  D. antivirus
  E. Web filtering
  B. antispam
  C. content filtering
  E. Web filtering

• Question 5:

  Which AppSecure feature identifies applications that are present in traffic?

  A. AppID
  B. AppTrack
  C. AppFW
  D. AppQoS
  A. AppID

• Question 6:

  You are implementing user authentication on your network using an SRX Series device and want to ensure that there are redundant forms of authentication for users to access the network. You have configured the device with the integrated user firewall and user role firewall features. You are testing failover methods using the default priority values.

  In this scenario, which two statements are true? (Choose two.)

  A. If the user fails local authentication, then the Junos OS will attempt to authenticate the user with a user role firewall.
  B. If the user fails user role firewall authentication, then the Junos OS will attempt to authenticate the user with an integrated user firewall.
  C. If the user fails integrated user firewall authentication, then the Junos OS will attempt to authenticate with a user role firewall.
  D. If the user fails local authentication, then the Junos OS will attempt to authenticate the user with an integrated user firewall.
  C. If the user fails integrated user firewall authentication, then the Junos OS will attempt to authenticate with a user role firewall.
  D. If the user fails local authentication, then the Junos OS will attempt to authenticate the user with an integrated user firewall.

• Question 7:

  You have configured a log collector VM and Security Director. System logging is enabled on a branch SRX Series device, but security logs do not appear in the monitor charts.

  How would you solve this problem?

  A. Configure a security policy to forward logs to the collector.
  B. Configure application identification on the SRX Series device.
  C. Configure security logging on the SRX Series device.
  D. Configure J-Flow on the SRX Series device.
  C. Configure security logging on the SRX Series device.

• Question 8:

  Which statement about transparent mode on an SRX340 is true?

  A. You must reboot the device after configuring transparent mode.
  B. Security policies applied to transparent mode zones require Layer 2 address matching.
  C. Screens are not supported in transparent mode security zones.
  D. All interfaces on the device must be configured with the ethernet-switching protocol family.
  A. You must reboot the device after configuring transparent mode.

• Question 9:

  Which interface family is required for Layer 2 transparent mode on SRX Series devices?

  A. LLDP
  B. Ethernet switching
  C. inet
  D. VPLS
  B. Ethernet switching

• Question 10:

  You have been notified by your colocation provider that your infrastructure racks will no longer be adjacent to each other. In this scenario, which technology would you use to secure all Layer 2 and Layer 3 traffic between racks?

  A. IPsec
  B. GRE
  C. 802.1BR
  D. MACsec
  D. MACsec