Troubleshooting Tools JN0-637 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security team needs to centrally collect and analyze security events, including policy denials and session setup failures, from multiple Junos devices. They want a solution that can be integrated with their existing SIEM. Which approach should they use?

   • AUse 'monitor traffic' on each device to capture all traffic and send it to the SIEM.
   • BConfigure syslog on each device to send security events to the SIEM server.
   • CConfigure traceoptions on each device to log all events to a local file.
   • DUse 'show security flow session' on each device to manually check for denials.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What does the `monitor traffic interface ge-0/0/0` command do?

   • ADisplays interface statistics
   • BConfigures the interface
   • CShows routing table entries
   • DCaptures packets on the specified interface
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which hierarchy is used to configure traceoptions for security zone-related events?

   • Aset system traceoptions
   • Bset security zones traceoptions
   • Cset security policies traceoptions
   • Dset interfaces traceoptions
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which field in a security flow log indicates whether a session was permitted or denied by a policy?

   • ASource address
   • BDestination port
   • CAction
   • DInterface name
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which Junos configuration stanza is used to enable traceoptions for security policy debugging?

   • Aset interfaces ge-0/0/0 traceoptions file policy-debug.log
   • Bset security zones traceoptions file zone-debug.log
   • Cset system syslog file policy-debug.log
   • Dset security policies traceoptions file policy-debug.log
   Reveal Solution Discussion Select an answer first