Free Juniper JN0-633 Exam Dumps Questions & Answers

Click the Exhibit button.
{primarynode0}[edit security idp idp-policy test-ips-policy]
user@host# show
rulebase-ips {
rule r1 {
match {
source-address any;
attacks {
predefined-attack-groups "HTTP - All";
}
}
then {
action {
drop-packet;
}
}
terminal;
}
rule r2 {
match {
source-address 172.16.0.0/12;
attacks {
predefined-attack-groups "FTP - All";
}
then {
action {
no-action;
}
}
}
rule r3 {
match {
source-address 172.16.0.0/12;
attacks {
predefined-attack-groups "TELNET - All";
}
}
then {
action {
no-action;
} } } rule r4 { match { source-address any; attacks { predefined-attack-groups "FTP - All"; } } then { action { drop-packet; } } } }
A user with IP address 172.301.100 initiates an FTP session to a host with IP address
10.100.1.50 through an SRX Series device and is subject to the IPS policy shown in the exhibit.
If the user tries to execute thecd ~rootcommand, which statement is correct?

• A.  The FTP command will be allowed to execute but any other attacks executed during the session will be inspected.
• B.  The FTP command will be allowed to execute and the rest of the FTP session will be ignored by the IPS policy.
• C.  The FTP command will be denied with the offending packet dropped and the session will be closed by the SRX device.
• D.  The FTP command will be denied with the offending packet dropped and the rest of the FTP session will be inspected by the IPS policy.

Click the Exhibit button. -- Exhibit-

-- Exhibit -
TCP traffic sourced from Host A destined for Host B is being redirected using filter-based forwarding to use the Red network. However, return traffic from Host B destined for Host A is using the Blue network and getting dropped by the SRX device.
Which action will resolve the issue?

• A.  Disable TCP sequence checking.
• B.  Configure ge-0/0/1 to belong to the Red zone.
• C.  Disable RPF checking.
• D.  Enable asyncronous-routing under the Blue zone.

You are asked to configure class of service (CoS) on an SRX device running in transparent mode. Which command would you use?

• A.  set interfaces ge-0/0/0 unit 0 classifiers dscp priority-app
• B.  set class-of-service interfaces ge-0/0/0 unit 0 classifiers ieee-802.1 priority-app
• C.  set class-of-service interfaces ge-0/0/0 unit 0 classifiers dscp priority-app
• D.  set interfaces ge-0/0/0 unit 0 classifiers inet-precedence priority-app

Click the Exhibit button.
-- Exhibit-

-- Exhibit -
An attacker is using a nonstandard port for HTTP for reconnaissance into your network.
Referring to the exhibit, which two statements are true? (Choose two.)

• A.  The IPS engine will not detect the application due to the nonstandard port.
• B.  The IPS engine will perform application identification until it processes the first 256 bytes of the packet.
• C.  The IPS engine will perform application identification until the session is established.
• D.  The IPS engine will detect the application regardless of the nonstandard port.

Click the Exhibit button.
-- Exhibit --
user@srx# show security datapath-debug
capture-file pkt-cap-file format pcap size 5m;
action-profile {
pkt-cap-profile {
event np-ingress {
packet-dump;
}
}
}
packet-filter pkt-filter {
action-profile pkt-capture;
source-prefix 1.2.3.4/32;
}
-- Exhibit --
You want to capture transit traffic passing through your SRX3600. You add the configuration shown in the exhibit but do not see entries added to the capture file.
What is causing the problem?

• A.  You must start the capture from operational mode with the command monitor start capture.
• B.  You are missing the configuration set security datapath-debug maximum-capture-size 1500.
• C.  You must start the capture from operational mode with the command request security datapath-debug capture start.
• D.  You are missing the configuration set security datapath-debug packet-filter pkt-filter destination-prefix 5.6.7.8/32.