Juniper JN0-633 Exam Questions

Question 6 of 181

What are two AppSecure modules? (Choose two.)

A.

AppDoS

B.

AppFlow

C.

AppTrack

D.

AppNAT

Correct Answer: A, C

Question 7 of 181

You are working as a security administrator and must configure a solution to protect against distributed botnet attacks on your company's central SRX cluster.
How would you accomplish this goal?

A.

Configure AppTrack to inspect and drop traffic from the malicious hosts.

B.

Configure AppQoS to block the malicious hosts.

C.

Configure AppDoS to rate limit connections from the malicious hosts.

D.

Configure AppID with a custom application to block traffic from the malicious hosts.

Correct Answer: C

Question 8 of 181

You are asked to change the configuration of your company's SRX device so that you can block nested traffic from certain Web sites, but the main pages of these
Web sites must remain available to users. Which two methods will accomplish this goal? (Choose two.)

A.

Enable the HTTP ALG.

B.

Implement a firewall filter for Web traffic.

C.

Use an IDP policy to inspect the Web traffic.

D.

Configure an application firewall rule set.

Correct Answer: B, D

Question 9 of 181

You are using the AppDoS feature to control against malicious bot client attacks. The bot clients are using file downloads to attack your server farm. You have configured a context value rate of 10,000 hits in 60 seconds. At which threshold will the bot clients no longer be classified as malicious?

A.

5000 hits in 60 seconds

B.

8000 hits in 60 seconds

C.

7500 hits in 60 seconds

D.

9999 hits in 60 seconds

Correct Answer: B

Question 10 of 181

Your company's network has seen an increase in Facebook-related traffic. You have been asked to restrict the amount of Facebook-related traffic to less than 100
Mbps regardless of congestion. What are three components used to accomplish this task? (Choose three.)