JN0-634 Practice Test Questions – Security, Professional (JNCIP-SEC)

1. Which Junos security feature is used for signature-based attack prevention?

2. Using content filtering on an SRX Series device, which three types of HTTP content are able to be blocked? (Choose three.)

3. After using Security Director to add a new firewall policy rule on an SRX Series device, you notice that the hit count on the policy is not increasing. Upon further investigation, you find that the devices listed in the new rule are able to communicate as expected. Your firewall policy consists of hundreds of rules.

Using only Security Director, how do you find the rule that is allowing the communication to occur in this scenario?

4. Your network includes SRX Series devices at the headquarters location. The SRX Series devices at this location are part of a high availability chassis cluster and are configured for IPS. There has been a node failover.

In this scenario, which statement is true?

5. You are scanning files that are being transferred from the Internet to hosts on your internal network with Sky ATP. However, you notice that files that are 1 GB in size are not being scanned by Sky ATP.

In this scenario, which two statements are true? (Choose two.)

6. Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

7. You want to review AppTrack statistics to determine the characteristics of the traffic being monitored.

Which operational mode command would accomplish this task on an SRX Series device?

8. Which AppSecure feature identifies applications that are present in traffic?

9. What is the correct application mapping sequence when a user goes to Facebook for the first time through an SRX Series device?

10. You have been notified by your colocation provider that your infrastructure racks will no longer be adjacent to each other.

In this scenario, which technology would you use to secure all Layer 2 and Layer 3 traffic between racks?