Question 1

Which zone is considered a functional zone?

Accepted Answer

A)  junos host 
B)  null 
C)  trust 
D)  management 
A)  junos host 
B)  null 
C)  trust 
D)  management B

Question 2

Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)

Accepted Answer

A)  With global-based policies, you do not need to specify a source address in the match criteria. 
B)  With global-based policies, you do not need to specify a destination zone in the match criteria. 
C)  With global-based policies, you do not need to specify a destination address in the match criteria. 
D)  With global-based policies, you do not need to specify a source zone in the match criteria. 
A)  With global-based policies, you do not need to specify a source address in the match criteria. 
B)  With global-based policies, you do not need to specify a destination zone in the match criteria. 
C)  With global-based policies, you do not need to specify a destination address in the match criteria. 
D)  With global-based policies, you do not need to specify a source zone in the match criteria. B,D

Question 3

What must you do first to use the Monitor/Events workspace in the J-Web interface?

Accepted Answer

A)  You must enable security logging that uses the TLS transport mode. 
B)  You must enable security logging that uses the SD-Syslog format. 
C)  You must enable stream mode security logging on the SRX Series device. 
D)  You must enable event mode security logging on the SRX Series device. 
A)  You must enable security logging that uses the TLS transport mode. 
B)  You must enable security logging that uses the SD-Syslog format. 
C)  You must enable stream mode security logging on the SRX Series device. 
D)  You must enable event mode security logging on the SRX Series device. B

Question 4

When configuring IPsec VPNs, setting a hash algorithm solves which security concern?

Accepted Answer

A)  availability 
B)  encryption 
C)  redundancy 
D)  integrity 
A)  availability 
B)  encryption 
C)  redundancy 
D)  integrity

Question 5

Which two statements are correct about global security policies? (Choose two.)

Accepted Answer

A)  Global-based policies can reference the destination zone. 
B)  Global-based policies can reference the source zone. 
C)  Global-based policies must reference a dynamic application. 
D)  Global-based policies must reference the source and destination zones. 
A)  Global-based policies can reference the destination zone. 
B)  Global-based policies can reference the source zone. 
C)  Global-based policies must reference a dynamic application. 
D)  Global-based policies must reference the source and destination zones.

Question 6

Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

Accepted Answer

A)  scheduler 
B)  pass-through authentication 
C)  ALGs 
D)  counters 
A)  scheduler 
B)  pass-through authentication 
C)  ALGs 
D)  counters

Question 7

Click the Exhibit button.   Referring to the exhibit, which statement is true?

Accepted Answer

A)  IDP blocks root users. IDP blocks root users. 
B)  IDP closes the connection on matched sessions. 
C)  IDP ignores the connection on matched sessions. 
D)  IDP blocks all users. 
A)  IDP blocks root users. IDP blocks root users. 
B)  IDP closes the connection on matched sessions. 
C)  IDP ignores the connection on matched sessions. 
D)  IDP blocks all users.

Question 8

Which two statements are true about virtualized SRX Series devices? (Choose two.)

Accepted Answer

A)  vSRX cannot be deployed in transparent mode. 
B)  cSRX can be deployed in routed mode. 
C)  cSRX cannot be deployed in routed mode. 
D)  vSRX can be deployed in transparent mode. 
A)  vSRX cannot be deployed in transparent mode. 
B)  cSRX can be deployed in routed mode. 
C)  cSRX cannot be deployed in routed mode. 
D)  vSRX can be deployed in transparent mode.

Question 9

Users in your network are downloading files with file extensions that you consider to be unsafe for your network. You must prevent files with specific file extensions from entering your network. Which UTM feature should be enabled on an SRX Series device to accomplish this task?

Accepted Answer

A)  content filtering 
B)  antispam 
C)  Web filtering 
D)  URL filtering 
A)  content filtering 
B)  antispam 
C)  Web filtering 
D)  URL filtering

Question 10

Click the Exhibit button.   You are configuring an SRX chassis cluster with the node-specific hostname and management address. Referring to the exhibit, which configuration completes this requirement?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 11

Which feature supports sandboxing of zero-day attacks?

Accepted Answer

A)  Sky ATP 
B)  SSL proxy 
C)  ALGs 
D)  high availability 
A)  Sky ATP 
B)  SSL proxy 
C)  ALGs 
D)  high availability

Question 12

On an SRX Series device, how should you configure your IKE gateway if the remote endpoint is a branch office using a dynamic IP address?

Accepted Answer

A)  Configure the IPsec policy to use MD5 authentication. 
B)  Configure the IKE policy to use aggressive mode. 
C)  Configure the IPsec policy to use aggressive mode. 
D)  Configure the IKE policy to use a static IP address. 
A)  Configure the IPsec policy to use MD5 authentication. 
B)  Configure the IKE policy to use aggressive mode. 
C)  Configure the IPsec policy to use aggressive mode. 
D)  Configure the IKE policy to use a static IP address.

Question 13

Click the Exhibit button.   Referring to the exhibit, which statement is true?

Accepted Answer

A)  Hosts are always able to communicate through the SRX Series device no matter the threat score assigned to them on the infected host feed. 
B)  Hosts are unable to communicate through the SRX Series device after being placed on the infected host feed with a high enough threat score. 
C)  Malicious HTTP file downloads are never blocked. 
D)  Malicious HTTP file downloads are always blocked. 
A)  Hosts are always able to communicate through the SRX Series device no matter the threat score assigned to them on the infected host feed. 
B)  Hosts are unable to communicate through the SRX Series device after being placed on the infected host feed with a high enough threat score. 
C)  Malicious HTTP file downloads are never blocked. 
D)  Malicious HTTP file downloads are always blocked.

Question 14

Which statement is true about JATP incidents?

Accepted Answer

A)  Incidents have an associated threat number assigned to them. 
B)  Incidents are sorted by category, followed by severity. 
C)  Incidents consist of all the events associated with a single threat. 
D)  Incidents are always automatically mitigated. 
A)  Incidents have an associated threat number assigned to them. 
B)  Incidents are sorted by category, followed by severity. 
C)  Incidents consist of all the events associated with a single threat. 
D)  Incidents are always automatically mitigated.

Question 15

Which two statements describe how rules are used with Juniper Secure Analytics? (Choose two.)

Accepted Answer

A)  When a rule is triggered, JSA can respond by sending an e-mail to JSA administrators. 
B)  Rules are defined on Junos Space Security Director, and then pushed to JSA log collectors. 
C)  A rule defines matching criteria and actions that should be taken when an events matches the rule. 
D)  When a rule is triggered, JSA can respond by blocking all traffic from a specific source address. 
A)  When a rule is triggered, JSA can respond by sending an e-mail to JSA administrators. 
B)  Rules are defined on Junos Space Security Director, and then pushed to JSA log collectors. 
C)  A rule defines matching criteria and actions that should be taken when an events matches the rule. 
D)  When a rule is triggered, JSA can respond by blocking all traffic from a specific source address.

Question 16

Which statement describes the AppTrack module in AppSecure?

Accepted Answer

A)  The AppTrack module provides enforcement with the ability to block traffic, based on specific applications. 
B)  The AppTrack module provides control by the routing of traffic, based on the application. 
C)  The AppTrack module identifies the applications that are present in network traffic. 
D)  The AppTrack module provides visibility and volumetric reporting of application usage on the network. 
A)  The AppTrack module provides enforcement with the ability to block traffic, based on specific applications. 
B)  The AppTrack module provides control by the routing of traffic, based on the application. 
C)  The AppTrack module identifies the applications that are present in network traffic. 
D)  The AppTrack module provides visibility and volumetric reporting of application usage on the network.

Question 17

Click the Exhibit button.   Users should not have access to Facebook, however, a recent examination of the security logs show that users are accessing Facebook. Referring to the exhibit, what should you do to solve this problem?

Accepted Answer

A)  Change the source address for the Block-Facebook-Access rule to the prefix of the users. 
B)  Change the Block-Facebook-Access rule from a zone policy to a global policy. 
C)  Move the Block-Facebook-Access rule before the Internet-Access rule. 
D)  Change the Internet-Access rule from a zone policy to a global policy. 
A)  Change the source address for the Block-Facebook-Access rule to the prefix of the users. 
B)  Change the Block-Facebook-Access rule from a zone policy to a global policy. 
C)  Move the Block-Facebook-Access rule before the Internet-Access rule. 
D)  Change the Internet-Access rule from a zone policy to a global policy.

Question 18

The AppQoE module of AppSecure provides which function?

Accepted Answer

A)  The AppQoE module provides application-based routing. 
B)  The AppQoE module prioritizes important applications. 
C)  The AppQoE module provides routing, based on network conditions. 
D)  The AppQoE module blocks access to risky applications. 
A)  The AppQoE module provides application-based routing. 
B)  The AppQoE module prioritizes important applications. 
C)  The AppQoE module provides routing, based on network conditions. 
D)  The AppQoE module blocks access to risky applications.

Question 19

You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution. Which action would accomplish this task?

Accepted Answer

A)  Configure a new anti-virus configuration rule. 
B)  Configure whitelist rules 
C)  Configure YARA rules. 
D)  Configure the SAML settings. 
A)  Configure a new anti-virus configuration rule. 
B)  Configure whitelist rules 
C)  Configure YARA rules. 
D)  Configure the SAML settings.

Question 20

What are two valid JIMS event log sources? (Choose two.)

Accepted Answer

A)  Microsoft Windows Server 2012 audit logs 
B)  Microsoft Active Directory server event logs 
C)  Microsoft Exchange Server event logs 
D)  Microsoft Active Directory audit logs 
A)  Microsoft Windows Server 2012 audit logs 
B)  Microsoft Active Directory server event logs 
C)  Microsoft Exchange Server event logs 
D)  Microsoft Active Directory audit logs

Which zone is considered a functional zone?

Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)

What must you do first to use the Monitor/Events workspace in the J-Web interface?

When configuring IPsec VPNs, setting a hash algorithm solves which security concern?

Which two statements are correct about global security policies? (Choose two.)

Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

Click the Exhibit button. Referring to the exhibit, which statement is true?

Which two statements are true about virtualized SRX Series devices? (Choose two.)

Users in your network are downloading files with file extensions that you consider to be unsafe for your network. You must prevent files with specific file extensions from entering your network. Which UTM feature should be enabled on an SRX Series device to accomplish this task?

Click the Exhibit button. You are configuring an SRX chassis cluster with the node-specific hostname and management address. Referring to the exhibit, which configuration completes this requirement?

Which feature supports sandboxing of zero-day attacks?

On an SRX Series device, how should you configure your IKE gateway if the remote endpoint is a branch office using a dynamic IP address?

Click the Exhibit button. Referring to the exhibit, which statement is true?

Which statement is true about JATP incidents?

Which two statements describe how rules are used with Juniper Secure Analytics? (Choose two.)

Which statement describes the AppTrack module in AppSecure?

Click the Exhibit button. Users should not have access to Facebook, however, a recent examination of the security logs show that users are accessing Facebook. Referring to the exhibit, what should you do to solve this problem?

The AppQoE module of AppSecure provides which function?

You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution. Which action would accomplish this task?

What are two valid JIMS event log sources? (Choose two.)

Junos, Associate (JNCIA-Junos)

Data Center Design, Specialist (JNCDS-DC)

Security Design, Specialist (JNCDS-SEC)

Cloud, Associate

Security, Associate (JNCIA-SEC)

Mist AI, Associate (JNCIA-MistAI)

Security, Specialist

Enterprise Routing and Switching, Specialist

Service Provider Routing and Switching, Specialist

JCloud, Specialist (JNCIS-Cloud)

Mist AI, Specialist

Security, Professional

Enterprise Routing and Switching, Professional (JNCIP-ENT)

Service Provider Routing and Switching, Professional (JNCIP-SP)

New Data Center, Professional

Filters

Exam 5: Automation and DevOps, Associate

Which zone is considered a functional zone?

Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)

What must you do first to use the Monitor/Events workspace in the J-Web interface?

When configuring IPsec VPNs, setting a hash algorithm solves which security concern?

Which two statements are correct about global security policies? (Choose two.)

Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

Click the Exhibit button. Referring to the exhibit, which statement is true?

Which two statements are true about virtualized SRX Series devices? (Choose two.)

Users in your network are downloading files with file extensions that you consider to be unsafe for your network. You must prevent files with specific file extensions from entering your network. Which UTM feature should be enabled on an SRX Series device to accomplish this task?

Click the Exhibit button. You are configuring an SRX chassis cluster with the node-specific hostname and management address. Referring to the exhibit, which configuration completes this requirement?

Which feature supports sandboxing of zero-day attacks?

On an SRX Series device, how should you configure your IKE gateway if the remote endpoint is a branch office using a dynamic IP address?

Click the Exhibit button. Referring to the exhibit, which statement is true?

Which statement is true about JATP incidents?

Which two statements describe how rules are used with Juniper Secure Analytics? (Choose two.)

Which statement describes the AppTrack module in AppSecure?

Click the Exhibit button. Users should not have access to Facebook, however, a recent examination of the security logs show that users are accessing Facebook. Referring to the exhibit, what should you do to solve this problem?

The AppQoE module of AppSecure provides which function?

You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution. Which action would accomplish this task?

What are two valid JIMS event log sources? (Choose two.)

Junos, Associate (JNCIA-Junos)

Data Center Design, Specialist (JNCDS-DC)

Security Design, Specialist (JNCDS-SEC)

Cloud, Associate

Security, Associate (JNCIA-SEC)

Mist AI, Associate (JNCIA-MistAI)

Security, Specialist

Enterprise Routing and Switching, Specialist

Service Provider Routing and Switching, Specialist

JCloud, Specialist (JNCIS-Cloud)

Mist AI, Specialist

Security, Professional

Enterprise Routing and Switching, Professional (JNCIP-ENT)

Service Provider Routing and Switching, Professional (JNCIP-SP)

New Data Center, Professional

Filters