JN0-634 Online Practice Questions and Answers

Using content filtering on an SRX Series device, which three types of HTTP content are able to be blocked? (Choose three.)

A. PDF files

B. ZIP files

C. Java applets

D. Active X

E. Flash

Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high availability chassis cluster and are configured for IPS. There has been a node failover.

In this scenario, which statement is true?

A. Existing sessions continue to be processed by IPS because of table synchronization.

B. Existing sessions are no longer processed by IPS and become firewall sessions.

C. Existing session continue to be processed by IPS as long as GRES is configured.

D. Existing sessions are dropped and must be reestablished so IPS processing can occur.

What are three types of content that are filtered by the Junos UTM feature set? (Choose three.)

A. IMAP

B. HTTP

C. SIP

D. SSL

E. FTP

You are using IDP on your SRX Series device and are asked to ensure that the SRX Series device has the latest IDP database, as well as the latest application signature database.

In this scenario, which statement is true?

A. The application signature database cannot be updated on a device with the IDP database installed.

B. You must download each database separately.

C. The IDP database includes the latest application signature database.

D. You must download the application signature database before installing the IDP database.

Click the Exhibit button.

The UTM policy shown in the exhibit has been applied to a security policy on a branch SRX Series device. In this scenario, which statement is true?

A. HTTP downloads of ZIP files will be blocked.

B. FTP downloads of ZIP files will be blocked.

C. E-mail downloads of ZIP files will be blocked.

D. ZIP files can be renamed with a new extension to pass through the filter.

Your manager has notices a drop in productivity and believes it is due to employees checking their social media feeds too frequently. You are asked to provide analytical statistics for this traffic within your network on an hourly basis.

Which AppSecure feature should be used to collect this information?

A. AppQoS

B. AppFW

C. AppTrack

D. APBR

Click the Exhibit button.

Referring to the exhibit, which statement is true?

A. E-mails from the user@example.com address are marked with SPAM in the subject line by the spam block list server.

B. E-mails from the user@example.com address are blocked by the spam list server.

C. E-mails from the user@example.com address are blocked by the reject blacklist.

D. E-mails from the user@example.com address are allowed by the allow whitelist.

The Software-Defined Secure Networks Policy Enforcer contains which two components? (Choose two.)

A. SRX Series device

B. Sky ATP

C. Policy Controller

D. Feed Connector

Your network includes SRX Series devices configured with AppSecure.

Which two statements regarding the application identification engine are true? (Choose two.)

A. Applications are only matched in traffic flows associated with client-to-server sessions.

B. Applications are matched in traffic flows associated with client-to-server and server-to-client sessions.

C. If the packets entering the engine match a known application, then processing continues.

D. If the packets entering the engine match a known application, then processing stops.

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

A. The application firewall rule is not inspecting encrypted traffic.

B. There are two rules configured in the rule set.

C. The rule set uses application definitions from the predefined library.

D. The configured rule set matches most analyzed applications.