Security, Professional (JNCIP-SEC) JN0-634 Dumps

JN0-634 exam is a hot Juniper test for Professional Security (JNCIP-SEC) certification. In order to help candidates pass Juniper JN0-634 exam, Passcert ensures the quality and value of the Security, Professional (JNCIP-SEC) JN0-634 Dumps, it provides all the exam objectives to help you write your test easily,Passcert guarantees your passing of JNCIP-SEC Certification JN0-634 exam on your first try.

Security, Professional (JNCIP-SEC) is designed for experienced networking professionals with advanced knowledge of the Juniper Networks Junos OS for SRX Series devices, this written exam verifies the candidate's understanding of advanced security technologies and related platform configuration and troubleshooting skills.

Exam code: JN0-634

Written exam

Administered by Pearson VUE

Exam length: 120 minutes

Exam type: 65 multiple choice questions

Pass/fail status is available immediately

Junos Software Release: 15.1

Prerequisite certification

JNCIS-SEC

Application-Aware Security Services

Security Director Logging and Reporting

Sky ATP

Unified Threat Management(UTM)

Intrusion Prevention System(IPS)

Software Defined Secure Networks(SDSN)

User Firewall

Layer 2 Security

QUESTION NO: 1

Which Junos security feature is used for signature-based attack prevention?

A. RADIUS

B. AppQoS

C. IPS

D. PIM

Answer: C

QUESTION NO: 2

Using content filtering on an SRX Series device, which three types of HTTP content are able to be blocked? (Choose three.)

A. PDF files

B. ZIP files

C. Java applets

D. Active X

E. Flash

Answer: B,C,D

QUESTION NO: 3

After using Security Director to add a new firewall policy rule on an SRX Series device, you notice that the hit count on the policy is not increasing. Upon further investigation, you find that the devices listed in the new rule are able to communicate as expected. Your firewall policy consists of hundreds of rules.

Using only Security Director, how do you find the rule that is allowing the communication to occur in this scenario?

A. Generate a Top Firewall Rules report.

B. Generate a Policy Analysis report.

C. Generate a Top Source IPs report.

D. Generate a Top Firewall Events report.

Answer: D

QUESTION NO: 4

Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high availability chassis cluster and are configured for IPS. There has been a node failover.

In this scenario, which statement is true?

A. Existing sessions continue to be processed by IPS because of table synchronization.

B. Existing sessions are no longer processed by IPS and become firewall sessions.

C. Existing session continue to be processed by IPS as long as GRES is configured.

D. Existing sessions are dropped and must be reestablished so IPS processing can occur.

Answer: A

QUESTION NO: 5

You are scanning files that are being transferred from the Internet to hosts on your internal network with Sky ATP. However, you notice that files that are 1 GB in size are not being scanned by Sky ATP.

In this scenario, which two statements are true? (Choose two.)

A. The Sky ATP failback option is set to permit.

B. The Sky ATP engine or the SRX Series device is too busy.

C. The 1 GB file size is larger than the scan size limit for Sky ATP.

D. The Sky ATP policy on the SRX Series device is misconfigured.

Answer: C,D