Juniper JN0-634 Question Answer

Referring to the configuration shown in the exhibit, which statement explains why traffic matching the IDP signature DNS:OVERFLOW:TOO-LONG-TCP-MSG is not being stopped by the SRX Series device?

A. The security policy dmz-pol1 has an action of permit.
B. The IDP policy idp-pol1 is not configured as active.
C. The IDP rule r2 has an ip-action value of notify.
D. The IDP rule r1 has an action of ignore-connection.

Answer: B

Juniper JN0-634 Question Answer

Security Director is reporting the events shown in the exhibit.
If the fallback parameter is set to pass traffic, what would cause the events?

A. The files are too large for the antivirus engine to process.
B. The files are not scanned because they were permitted by a security policy.
C. The files are not scanned because they are the wrong file format.
D. The antivirus engine is unable to re-encrypt the files.

Answer: A

Juniper JN0-634 Question Answer

Which three components are part of the AppSecure services suite? (Choose three.)

A. IDP
B. Sky ATP
C. AppQoS
D. AppFW
E. Web filtering

Answer: A,C,D


Which two statements about enabling MACsec using static CAK security mode keys are true? (Choose two.)

A. CAK secures the data plane traffic.
B. SAK secures the data plane traffic.
C. SAK secures the control plane traffic.
D. CAK secures the control plane traffic.

Answer: B,D