Juniper JN0-634 問題集

質問 1：
Which interface family is required for Layer 2 transparent mode on SRX Series devices?
A. VPLS
B. LLDP
C. Ethernet switching
D. inet
正解：C

質問 2：
While reviewing the Log and Reporting portion of Security Director, you find that multiple objects reference the same address. You want to use a standardized name for all of the objects.
In this scenario, how would you create a standardized object name without searching the entire policy?
A. Remove the duplicate objects.
B. Rename the duplicate objects.
C. Merge the duplicate objects.
D. Replace the duplicate objects.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Click the Exhibit button.

Referring to the configuration shown in the exhibit, which statement explains why traffic matching the IDP signature DNS:OVERFLOW:TOO-LONG-TCP-MSG is not being stopped by the SRX Series device?
A. The IDP rule r1 has an action of ignore-connection.
B. The IDP policy idp-pol1 is not configured as active.
C. The security policy dmz-pol1 has an action of permit.
D. The IDP rule r2 has an ip-action value of notify.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Using content filtering on an SRX Series device, which three types of HTTP content are able to be blocked?
(Choose three.)
A. PDF files
B. ZIP files
C. Active X
D. Flash
E. Java applets
正解：B,C,E
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high availability chassis cluster and are configured for IPS. There has been a node failover.
In this scenario, which statement is true?
A. Existing sessions are dropped and must be reestablished so IPS processing can occur.
B. Existing session continue to be processed by IPS as long as GRES is configured.
C. Existing sessions continue to be processed by IPS because of table synchronization.
D. Existing sessions are no longer processed by IPS and become firewall sessions.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Click the Exhibit button.

Referring to the exhibit, you have configured a Sky ATP policy to inspect user traffic. However, you have noticed that encrypted traffic is not being inspected.
In this scenario, what must you do to solve this issue?
A. Configure the SSL forward proxy feature.
B. Configure the PKI feature.
C. Change the policy to inspect TLS traffic.
D. Change the policy to inspect HTTPS traffic.
正解：A

質問 7：
You have set up Sky ATP with the SRX Series devices in your network. However, your SRX Series devices are unable to communicate with the Sky ATP cloud because the communication is being blocked by a gateway network device.
Which two actions should you take to solve the problem? (Choose two.)
A. Open destination port 443 inbound from the Internet on the gateway network device.
B. Open destination port 8080 outbound from the Internet on the gateway network device.
C. Open destination port 443 outbound from the Internet on the gateway network device.
D. Open destination port 8080 inbound from the Internet on the gateway network device.
正解：C,D