Other Outputs JN0-637 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A security policy is not being applied to traffic as expected. You suspect the issue is related to the zone configuration. Which of the following is a common zone-related misconfiguration that could cause this?

   • AThe security policy has a high priority number.
   • BThe security policy is configured with a log action.
   • CThe security policy uses a wildcard address.
   • DThe interface is assigned to the wrong zone.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A security policy log entry shows the session details including source IP, destination IP, source port, destination port, and protocol. What is the primary purpose of recording these session details in the log?

   • ATo provide a record of the specific traffic that matched the policy for troubleshooting and auditing.
   • BTo block the traffic if it matches a known threat signature.
   • CTo encrypt the traffic for secure transmission.
   • DTo automatically update the security policy rules based on traffic patterns.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   While troubleshooting a connectivity issue, you examine a security policy log entry that shows the action field as 'permit'. What does this action indicate about the traffic that matched the policy?

   • AThe traffic was dropped and an alert was generated.
   • BThe traffic was rejected with a TCP reset.
   • CThe traffic was allowed to pass through the device.
   • DThe traffic was mirrored to a monitoring interface.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A network engineer is troubleshooting a zone-based policy issue. The engineer has two policies: 'policy-1' which allows HTTP from the trust zone to the untrust zone, and 'policy-2' which denies all traffic from the trust zone to the untrust zone. The engineer notices that HTTP traffic is being denied, even though 'policy-1' should allow it. The engineer checks the policy order and sees that 'policy-2' is listed before 'policy-1'. What should the engineer do to resolve this issue?

   • AChange the application in 'policy-1' to match the traffic.
   • BMove 'policy-1' to the top of the policy list, before 'policy-2'.
   • CChange the source and destination zones in 'policy-1' to match the traffic.
   • DDelete 'policy-2' and recreate it with a different name.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A network administrator is verifying the security zone configuration on a Junos device. The administrator needs to confirm that the 'trust' zone is correctly configured with the interface 'ge-0/0/0.0' and that host-inbound traffic for SSH is allowed. Which operational command should the administrator use to verify this configuration?

   • Ashow interfaces ge-0/0/0.0
   • Bshow security zones trust
   • Cshow configuration security zones trust
   • Dshow security policies trust-to-untrust
   Reveal Solution Discussion Select an answer first