JN0-634 Online Practice Questions and Answers

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

A. You can secure inter-VLAN traffic with a security policy on this device.

B. You can secure intra-VLAN traffic with a security policy on this device.

C. The device can pass Layer 2 and Layer 3 traffic at the same time.

D. The device cannot pass Layer 2 and Layer 3 traffic at the same time.

Click the Exhibit button.

Referring to the configuration shown in the exhibit, which statement explains why traffic matching the IDP signature DNS:OVERFLOW:TOO-LONG-TCP-MSG is not being stopped by the SRX Series device?

A. The security policy dmz-pol1 has an action of permit.

B. The IDP policy idp-pol1 is not configured as active.

C. The IDP rule r2 has an ip-action value of notify.

D. The IDP rule r1 has an action of ignore-connection.

Using the Policy Controller API, which configuration would post Sky ATP with PE mode to the Policy Enforcer controller configuration?

"configs": {

A. "sdsn": false "cloudonly": true }

B. "configs": { "sdsn": false "cloud": false } "configs": {

C. "sdsn": true "cloudonly": false }

D. "configs": { "sdsn": false "cloud": true }

Which three components are part of the AppSecure services suite? (Choose three.)

A. IDP

B. Sky ATP

C. AppQoS

D. AppFW

E. Web filtering

While reviewing the Log and Reporting portion of Security Director, you find that multiple objects reference the same address. You want to use a standardized name for all of the objects.

In this scenario, how would you create a standardized object name without searching the entire policy?

A. Remove the duplicate objects.

B. Merge the duplicate objects.

C. Rename the duplicate objects.

D. Replace the duplicate objects.

Which IDP rule configuration will send an RST to any new session that meets the action criteria?

A. ip-action block

B. action close-client-and-server

C. ip-action close

D. action drop-connection

Click the Exhibit button.

A customer submits a service ticket complaining that access to http://www.example.com/ has been blocked.

Referring to the log message shown in the exhibit, why was access blocked?

A. All illegal source port was utilized.

B. The URI matched a profile entry.

C. The user/role permissions were exceeded.

D. There was a website category infraction.

Click the Exhibit button.

Security Director is reporting the events shown in the exhibit.

If the fallback parameter is set to pass traffic, what would cause the events?

A. The files are too large for the antivirus engine to process.

B. The files are not scanned because they were permitted by a security policy.

C. The files are not scanned because they are the wrong file format.

D. The antivirus engine is unable to re-encrypt the files.

Which interface family is required for Layer 2 transparent mode on SRX Series devices?

A. LLDP

B. Ethernet switching

C. inet

D. VPLS

Click the Exhibit button.

You have configured integrated user firewall on the SRX Series devices in your network. However, you noticed that no users can access the servers that are behind the SRX Series devices.

Referring to the exhibit, what is the problem?

A. The Kerberos service is not configured correctly on the Active Directory server.

B. There are no authentication entries in the SRX Series device for the users.

C. The security policy on the SRX Series device is configured incorrectly.

D. The SAML service is not configured correctly on the Active Directory server.