JN0-696 Real Exam Questions

Click the Exhibit button. A customer created a security policy and is not receiving any logs from permitted sessions, you are asked to obtain the logs for the customer. Which parameter must you add to the configuration shown in the exhibit to accomplish this task?

user@host> show configuration ... security { nat { destination { pool server { address 10.100.100.1/32 port 5555; } rule-set rule1 { from zone UNTRUST; rule 1 { match { destination-address 192.168.100.1/32; destination-port 5000; } then { destination-nat pool server; } } } } proxy-arp { interface ge-0/0/1.0 { address { 192.168.100.1/32; } } } } policies { from-zone UNTRUST to-zone TRUST { policy allow { match { source-address any; destination-address any; application [ junos-ping tcp-5000 ]; } then { permit; } } } } zones { security-zone TRUST { interfaces { ge-0/0/2.0 { host-inbound-traffic { protocols { all; } } } } } security-zone UNTRUST { interfaces { ge-0/0/1.0 { host-inbound-traffic { system-services { ping; } } } } } } } applications { application tcp-5000 { protocol tcp; destination-port 5000; } } Your customer is attempting to reach a new server that should be accessible publicly using 192.168.100.100 on TCP port 5000, and internally using 10.100.100.1 on TCP port 5555. You notice no sessions form when the customer attempts to access the server. Referring to the exhibit, what will resolve this problem?

You have deployed AppID on your SRX Series device. You want to block all HTTP connections. However, there is a packet-monitoring device that shows the SRX Series device is still allowing some packets through to the webservers on TCP port 80. In this scenario, which statement is correct?

You recently configured the antivirus feature profile on your Junos device. The security policy is sending traffic for antivirus scanning. However, the traffic is being blocked and you repeatedly receive the system log message that the scan engine is not ready. You must not allow the traffic to be dropped when the scan engine is not ready. Which action will resolve this problem?

You are troubleshooting UTM Web filtering for a customer on an SRX Series device. Users are able to access HTTPS websites; however, you realize that those URLs have been blocked on the UTM policy. In this scenario, which statement is correct?