Juniper Jn0-634 Torrent 2021

NEW QUESTION 1
What is the required when deploying a log collector in Junos Space?

• A. root user access to the log collector
• B. a shared log file directory on the log collector
• C. the IP address of interface eth1 on the log collector
• D. a distributed deployment of the log collector nodes

Answer: A

NEW QUESTION 2
The Software-Defined Secure Networks Policy Enforcer contains which two components? (Choose two.)

• A. SRX Series device
• B. Sky ATP
• C. Policy Controller
• D. Feed Connector

Answer: CD

NEW QUESTION 3
Click the Exhibit button.

Referring to the configuration shown in the exhibit, which statement explains why traffic matching the IDP signature DNS:OVERFLOW:TOO-LONG-TCP-MSG is not being stopped by the SRX Series device?

• A. The security policy dmz-pol1 has an action of permit.
• B. The IDP policy idp-pol1 is not configured as active.
• C. The IDP rule r2 has an ip-action value of notify.
• D. The IDP rule r1 has an action of ignore-connection.

Answer: B

NEW QUESTION 4
What are three types of content that are filtered by the Junos UTM feature set? (Choose three.)

• A. IMAP
• B. HTTP
• C. SIP
• D. SSL
• E. FTP

Answer: ABE

NEW QUESTION 5
Click the Exhibit button.

Two hosts on the same subnet are connected to an SRX340 using interfaces ge-0/0/4 and
ge-0/0/5. The two hosts can communicate with each other, but they cannot communicate with hosts outside of their subnet.
Referring to the exhibit, which three actions would you take to solve this problem? (Choose three.)

• A. Add the ge-0/0/4 and ge-0/0/5 interfaces to the L2 zone.
• B. Remove the irb.0 interface from the L2 zone.
• C. Set the SRX340 to Ethernet switching mode.
• D. Configure a security policy to permit the traffic.
• E. Reboot the SRX340.

Answer: CDE

NEW QUESTION 6
Click the Exhibit button.

Referring to the exhibit, you have expanded the disk storage size in ESXi for your log collector from 500 GB to 600 GB. However, your log collector’s disk size has not changed.
Given the scenario, which two statements are true? (Choose two.)

• A. You must run a script from the console to expand the disk size.
• B. The ESXi storage parameter is not associated with the Elasticsearch disk size parameter.
• C. You must reboot the log collector for storage settings to be updated
• D. You must re-run the log collector setup script to update the storage settings.

Answer: AC

NEW QUESTION 7
Click the Exhibit button.

Referring to the exhibit, how many AppTrack logs will be generated for an HTTP session lasting 12 minutes?

• A. 4
• B. 2
• C. 1
• D. 3

Answer: A

NEW QUESTION 8
After using Security Director to add a new firewall policy rule on an SRX Series device, you notice that the hit count on the policy is not increasing. Upon further investigation, you find that the devices listed in the new rule are able to communicate as expected. Your firewall policy consists of hundreds of rules.
Using only Security Director, how do you find the rule that is allowing the communication to occur in this scenario?

• A. Generate a Top Firewall Rules report.
• B. Generate a Policy Analysis report.
• C. Generate a Top Source IPs report.
• D. Generate a Top Firewall Events report.

Answer: D

NEW QUESTION 9
Click the Exhibit button.

You have enabled mixed mode on an SRX Series device. You are unable to commit the configuration shown in the exhibit.
What is the problem in this scenario?

• A. A Layer 3 interface has not been configured on VLAN v10.
• B. The trust zone cannot contain both Layer 2 and Layer 3 interfaces.
• C. STP is not enabled under the host-inbound-traffic system services hierarchy on the trust and protected security zones.
• D. An IRB interface has not been configured.

Answer: B

NEW QUESTION 10
Which two statements about the integrated user firewall feature of the Junos OS are true? (Choose two.)

• A. The maximum number of supported active directory servers is ten.
• B. IPv6 addresses are not supported.
• C. The maximum number of supported active directory servers is five.
• D. IPv6 addresses are supported.

Answer: AB

NEW QUESTION 11
Which browser is supported by Security Director with Logging and Reporting?

• A. Firefox
• B. Agora
• C. PowerBrowser
• D. Mosaic

Answer: A

NEW QUESTION 12
Click the Exhibit button.

You have configured integrated user firewall on the SRX Series devices in your network. However, you noticed that no users can access the servers that are behind the SRX Series devices.
Referring to the exhibit, what is the problem?

• A. The Kerberos service is not configured correctly on the Active Directory server.
• B. There are no authentication entries in the SRX Series device for the users.
• C. The security policy on the SRX Series device is configured incorrectly.
• D. The SAML service is not configured correctly on the Active Directory server.

Answer: C

NEW QUESTION 13
Click the Exhibit button.

Referring to the exhibit, a user with IP address 10.1.1.85 generates a request that triggers the HTTP:EXT:DOT-LNK IDP signature that is a member of the “HTTP – All” predefined attack group.
In this scenario, which statement is true?

• A. The session will be closed and a reset sent to the client and server.
• B. A Differentiated Services code point value of 8 will be applied.
• C. No action will be taken and the attack information will be logged.
• D. The session will be dropped with no reset sent to the client or server.

Answer: D

NEW QUESTION 14
Which feature of Sky ATP is deployed with Software-Defined Secure Networks?

• A. zero-day threat mitigation
• B. software image snapshot support
• C. device inventory management
• D. service redundancy daemon configuration support

Answer: A

NEW QUESTION 15
After downloading the new IPS attack database, the installation of the new database fails. What caused this condition?

• A. The new attack database no longer contained an attack entry that was in use.
• B. The new attack database was revoked between the time it was downloaded and installed.
• C. The new attack database was too large for the device on which it was being installed.
• D. Some of the new attack entries were already in use and had to be deactivated before installation.

Answer: A

NEW QUESTION 16
Click the Exhibit button.

A customer submits a service ticket complaining that access to http://www.example.com/ has been blocked.
Referring to the log message shown in the exhibit, why was access blocked?

• A. All illegal source port was utilized.
• B. The URI matched a profile entry.
• C. The user/role permissions were exceeded.
• D. There was a website category infraction.

Answer: B

NEW QUESTION 17
Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

• A. You can secure inter-VLAN traffic with a security policy on this device.
• B. You can secure intra-VLAN traffic with a security policy on this device.
• C. The device can pass Layer 2 and Layer 3 traffic at the same time.
• D. The device cannot pass Layer 2 and Layer 3 traffic at the same time.

Answer: AC

NEW QUESTION 18
Click the Exhibit button.

Referring to the exhibit, which statement is true?

• A. E-mails from the user@example.com address are marked with SPAM in the subject line by the spam block list server.
• B. E-mails from the user@example.com address are blocked by the spam list server.
• C. E-mails from the user@example.com address are blocked by the reject blacklist.
• D. E-mails from the user@example.com address are allowed by the allow whitelist.

Answer: D

NEW QUESTION 19
Click the Exhibit button.

According to the policy shown in the exhibit, which application-services traffic will be processed first?

• A. the application traffic matchings the IDP rules
• B. the application traffic matchings the utm-policy log rule set
• C. the application traffic matchings the utm-policy wf-policy_websense-home rules
• D. the application traffic matchings the application-firewall rule-set demo-tracking_1 rule

Answer: A

NEW QUESTION 20
Using the Policy Controller API, which configuration would post Sky ATP with PE mode to the Policy Enforcer controller configuration?

• A. “configs”: {“sdsn”: false“cloudonly”: true}
• B. “configs”: {“sdsn”: false“cloud”: false}
• C. “configs”: {“sdsn”: true“cloudonly”: false}
• D. “configs”: {“sdsn”: false“cloud”: true}

Answer: C

NEW QUESTION 21
Your manager has notices a drop in productivity and believes it is due to employees checking their social media feeds too frequently. You are asked to provide analytical statistics for this traffic within your network on an hourly basis.
Which AppSecure feature should be used to collect this information?

• A. AppQoS
• B. AppFW
• C. AppTrack
• D. APBR

Answer: C

NEW QUESTION 22
......