Logging or Tracing JN0-637 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which Junos configuration hierarchy is used to enable tracing for security policies?

   • Aset security zones security-zone trust traceoptions file zone.log
   • Bset security policies traceoptions file security-policy.log
   • Cset security log traceoptions file security.log
   • Dset system syslog traceoptions file security.log
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security administrator is troubleshooting an issue where traffic from a specific zone is not being processed by the security policy engine. The administrator has enabled session logging but is not seeing any log entries for the traffic. Which additional step should the administrator take to diagnose the issue?

   • ADisable session logging and re-enable it.
   • BIncrease the log file size to capture more entries.
   • CConfigure a firewall filter to count packets from the zone.
   • DEnable traceoptions on the security zone to capture zone-level events.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security administrator is troubleshooting a connectivity issue where traffic from a specific host is being denied. The session logs show that the traffic is being denied, but the administrator cannot determine why. Which additional information should the administrator enable to gain more insight into the denial?

   • AEnable packet capture on the interface.
   • BEnable session logging with the log-initial and log-close options on the deny policy.
   • CEnable firewall filter logging.
   • DEnable traceoptions on the security zone.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A user reports that they cannot access a specific application server. The security administrator reviews the session logs and sees that the traffic is being denied. The administrator needs to determine which security policy is causing the denial. Which log field should the administrator examine?

   • AThe source IP address field in the session log entry.
   • BThe action field in the session log entry.
   • CThe destination port field in the session log entry.
   • DThe policy name field in the session log entry.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security administrator needs to verify that traffic from a specific subnet is being permitted by the security policy. The administrator wants to see the start and end of each session. Which configuration should be applied to the relevant security policy?

   • AConfigure log-close only on the policy.
   • BConfigure log-initial only on the policy.
   • CConfigure session-log on the policy with the deny option.
   • DConfigure log-initial and log-close on the policy.
   Reveal Solution Discussion Select an answer first