JN0-634 Online Practice Questions and Answers

You are scanning files that are being transferred from the Internet to hosts on your internal network with Sky ATP. However, you notice that files that are 1 GB in size are not being scanned by Sky ATP.

In this scenario, which two statements are true? (Choose two.)

A. The Sky ATP failback option is set to permit.

B. The Sky ATP engine or the SRX Series device is too busy.

C. The 1 GB file size is larger than the scan size limit for Sky ATP.

D. The Sky ATP policy on the SRX Series device is misconfigured.

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

A. You can secure inter-VLAN traffic with a security policy on this device.

B. You can secure intra-VLAN traffic with a security policy on this device.

C. The device can pass Layer 2 and Layer 3 traffic at the same time.

D. The device cannot pass Layer 2 and Layer 3 traffic at the same time.

You want to review AppTrack statistics to determine the characteristics of the traffic being monitored. Which operational mode command would accomplish this task on an SRX Series device?

A. show services application-identification statistics applications

B. show services application-identification application detail

C. show security application-tracking counters

D. show services security-intelligence statistics

Click the Exhibit button.

Referring to the configuration shown in the exhibit, which statement explains why traffic matching the IDP signature DNS:OVERFLOW:TOO-LONG-TCP-MSG is not being stopped by the SRX Series device?

A. The security policy dmz-pol1 has an action of permit.

B. The IDP policy idp-pol1 is not configured as active.

C. The IDP rule r2 has an ip-action value of notify.

D. The IDP rule r1 has an action of ignore-connection.

What are three types of content that are filtered by the Junos UTM feature set? (Choose three.)

A. IMAP

B. HTTP

C. SIP

D. SSL

E. FTP

SRX Series devices with AppSecure support which three custom signatures? (Choose three.)

A. MAC address-based mapping

B. latency detection mapping

C. IP protocol-based mapping

D. ICMP-based mapping

E. Layer 7-based signatures

Click the Exhibit button.

Referring to the exhibit, how many AppTrack logs will be generated for an HTTP session lasting 12 minutes?

A. 4

B. 2

C. 1

D. 3

Which feature of Sky ATP is deployed with Software-Defined Secure Networks?

A. zero-day threat mitigation

B. software image snapshot support

C. device inventory management

D. service redundancy daemon configuration support

The Software-Defined Secure Networks Policy Enforcer contains which two components? (Choose two.)

A. SRX Series device

B. Sky ATP

C. Policy Controller

D. Feed Connector

Click the Exhibit button.

Referring to the security policy shown in the exhibit, which two actions will happen as the packet is processed? (Choose two.)

A. It passes unmatched traffic after modifying the DSCP priority.

B. It marks and passes matched traffic with a high DSCP priority.

C. It marks and passes matched traffic with a low DSCP priority.

D. It passes unmatched traffic without modifying DSCP priority.