Juniper JN0-634 問題集

質問 1：
Click the Exhibit button.

A
customer submits a service ticket complaining that access to http://www.example.com/ has been blocked.
Referring to the log message shown in the exhibit, why was access blocked?
A. All illegal source port was utilized.
B. The user/role permissions were exceeded.
C. The URI matched a profile entry.
D. There was a website category infraction.
正解：C

質問 2：
Click the Exhibit button.

Two hosts on the same subnet are connected to an SRX340 using interfaces ge-0/0/4 and ge-0/0/5. The two hosts can communicate with each other, but they cannot communicate with hosts outside of their subnet.
Referring to the exhibit, which three actions would you take to solve this problem? (Choose three.)
A. Set the SRX340 to Ethernet switching mode.
B. Remove the irb.0 interface from the L2 zone.
C. Add the ge-0/0/4 and ge-0/0/5 interfaces to the L2 zone.
D. Reboot the SRX340.
E. Configure a security policy to permit the traffic.
正解：A,D,E

質問 3：
Click the Exhibit button.

Your organization requests that you direct Facebook traffic out a different link to ensure that the bandwidth for critical applications is protected.
Referring to the exhibit, which forwarding instance will be used on your SRX Series device?
A. R3
B. R2
C. inet.0
D. R1
正解：B

質問 4：
What is the correct application mapping sequence when a user goes to Facebook for the first time through an SRX Series device?
A. first packet > check application system cache > process packet > classify application > match and identify application
B. first packet > process packet > check application system cache > classify application > match and identify application
C. first packet > process packet > check application system cache > classify application > process packet > match and identify application
D. first packet > check application system cache > classify application > process packet > match and identify application
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Click the Exhibit button.

Referring to the exhibit, you have configured a Sky ATP policy to inspect user traffic. However, you have noticed that encrypted traffic is not being inspected.
In this scenario, what must you do to solve this issue?
A. Configure the SSL forward proxy feature.
B. Configure the PKI feature.
C. Change the policy to inspect TLS traffic.
D. Change the policy to inspect HTTPS traffic.
正解：A

質問 6：
Click the Exhibit button.

Referring to the exhibit, the host has been automatically blocked from communicating on the network because a malicious file was downloaded. You cleaned the infected host and changed the investigation status to Resolved - Fixed.
What does Sky ATP do if the host then attempts to download a malicious file that would result in a threat score of 10?
A. Sky ATP logs the connection attempt and an SRX Series device does not allow the host to communicate on the network.
B. Sky ATP does not log the connection attempt and an SRX Series device does not allow the host to communicate on the network.
C. Sky ATP does not log the connection attempt and an SRX Series device allows the host to communicate on the network.
D. Sky ATP logs the connection attempt and an SRX Series device allows the host to communicate on the network.
正解：D