Latest JN0-634 JNCIP-SEC Study Guide

1. Which Junos security feature is used for signature-based attack prevention?

2. Using content filtering on an SRX Series device, which three types of HTTP content are able to be blocked? (Choose three.)

3. After using Security Director to add a new firewall policy rule on an SRX Series device, you notice that the hit count on the policy is not increasing. Upon further investigation, you find that the devices listed in the new rule are able to communicate as expected. Your firewall policy consists of hundreds of rules.

Using only Security Director, how do you find the rule that is allowing the communication to occur in this scenario?

4. Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high availability chassis cluster and are configured for IPS. There has been a node failover.

In this scenario, which statement is true?

5. You are scanning files that are being transferred from the Internet to hosts on your internal network with Sky ATP. However, you notice that files that are 1 GB in size are not being scanned by Sky ATP.

In this scenario, which two statements are true? (Choose two.)

6. Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

7. Click the Exhibit button.

You are trying to implement secure wire on your SRX Series device. However, you are receiving the commit error shown in the exhibit.

What must you do to solve the problem?

8. You want to review AppTrack statistics to determine the characteristics of the traffic being monitored.

Which operational mode command would accomplish this task on an SRX Series device?

9. Which AppSecure feature identifies applications that are present in traffic?

10. What is the correct application mapping sequence when a user goes to Facebook for the first time through an SRX Series device?

11. You have been notified by your colocation provider that your infrastructure racks will no longer be adjacent to each other.

In this scenario, which technology would you use to secure all Layer 2 and Layer 3 traffic between racks?

12. You need to add all of the sites in the domain example.com to urllist2. You decide to use wildcards to account for any changes made to the domain in the future.

In this scenario, which two commands would you use to meet this requirement? (Choose two.)

13. What is a function of UTM?

14. You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restarted to the VLANs from which they originate.

Which configuration accomplishes these objectives?

15. You have configured a log collector VM and Security Director. System logging is enabled on a branch SRX Series device, but security logs do not appear in the monitor charts.

How would you solve this problem?

16. Click the Exhibit button.

Referring to the configuration shown in the exhibit, which statement explains why traffic matching the IDP signature DNS:OVERFLOW:TOO-LONG-TCP-MSG is not being stopped by the SRX Series device?

17. Click the Exhibit button.

Which statement explains the current state value of the command output shown in the exhibit?

18. What are three types of content that are filtered by the Junos UTM feature set? (Choose three.)