Question 1

Which UTM feature uses MIME pattern filters to identify traffic in HTTP and e-mail protocols?

Accepted Answer

A)  antispam 
B)  antivirus 
C)  Web filtering 
D)  content filtering 
A)  antispam 
B)  antivirus 
C)  Web filtering 
D)  content filtering

Question 2

Which statement describes stateless firewalls on SRX Series devices?

Accepted Answer

A)  Each packet is analyzed based on source zone. 
B)  Each packet is analyzed based on Application Layer security. 
C)  Each packet is analyzed as part of a session. 
D)  Each packet is analyzed by firewall filters. 
A)  Each packet is analyzed based on source zone. 
B)  Each packet is analyzed based on Application Layer security. 
C)  Each packet is analyzed as part of a session. 
D)  Each packet is analyzed by firewall filters.

Question 3

Which solution should you use if you want to detect known attacks using signature-based methods?

Accepted Answer

A)  SSL proxy 
B)  JIMS 
C)  IPS 
D)  ALGs 
A)  SSL proxy 
B)  JIMS 
C)  IPS 
D)  ALGs

Question 4

Which statement is correct about IKE?

Accepted Answer

A)  IKE phase 1 is used to establish the data path. 
B)  IKE phase 1 only supports aggressive mode. 
C)  IKE phase 1 establishes the tunnel between devices. 
D)  IKE phase 1 negotiates a secure channel between gateways. 
A)  IKE phase 1 is used to establish the data path. 
B)  IKE phase 1 only supports aggressive mode. 
C)  IKE phase 1 establishes the tunnel between devices. 
D)  IKE phase 1 negotiates a secure channel between gateways.

Question 5

Click the Exhibit button.   Which two statements are true about the configuration shown in the exhibit? (Choose two.)

Accepted Answer

A)  The session is removed from the session table after 10 seconds of inactivity. 
B)  The session is removed from the session table after 10 milliseconds of inactivity. 
C)  Aggressive aging is triggered if the session table reaches 95% capacity. 
D)  Aggressive aging is triggered if the session table reaches 80% capacity. 
A)  The session is removed from the session table after 10 seconds of inactivity. 
B)  The session is removed from the session table after 10 milliseconds of inactivity. 
C)  Aggressive aging is triggered if the session table reaches 95% capacity. 
D)  Aggressive aging is triggered if the session table reaches 80% capacity.

Question 6

Which type of security policy protects restricted services from running on non-standard ports?

Accepted Answer

A)  application firewall 
B)  IDP 
C)  Sky ATP 
D)  antivirus 
A)  application firewall 
B)  IDP 
C)  Sky ATP 
D)  antivirus

Question 7

What is the definition of a zone on an SRX Series device?

Accepted Answer

A)  a collection of one or more network segments sharing similar security requirements 
B)  an individual logical interface with a public IP address 
C)  a collection of one or more network segments with different security requirements 
D)  an individual logical interface with a private IP address 
A)  a collection of one or more network segments sharing similar security requirements 
B)  an individual logical interface with a public IP address 
C)  a collection of one or more network segments with different security requirements 
D)  an individual logical interface with a private IP address

Question 8

What is the default session timeout value for ICMP and UDP traffic?

Accepted Answer

A)  30 seconds 
B)  30 minutes 
C)  60 seconds 
D)  5 minutes 
A)  30 seconds 
B)  30 minutes 
C)  60 seconds 
D)  5 minutes

Question 9

You want to use Sky ATP to protect your network; however, company policy does not allow you to send any files to the cloud. Which Sky ATP feature should you use in this situation?

Accepted Answer

A)  Only use on-premises local Sky ATP server anti-malware file scanning. 
B)  Only use cloud-based Sky ATP file hash lookups. 
C)  Only use on-box SRX anti-malware file scanning. 
D)  Only use cloud-based Sky ATP file blacklists. 
A)  Only use on-premises local Sky ATP server anti-malware file scanning. 
B)  Only use cloud-based Sky ATP file hash lookups. 
C)  Only use on-box SRX anti-malware file scanning. 
D)  Only use cloud-based Sky ATP file blacklists.

Question 10

What is the default timeout period for a TCP session in the session table of a Junos security device?

Accepted Answer

A)  1 minute 
B)  60 minutes 
C)  15 minutes 
D)  30 minutes 
A)  1 minute 
B)  60 minutes 
C)  15 minutes 
D)  30 minutes

Question 11

You have deployed JSA and you need to view events and network activity that match rule criteria. You must view this data using a single interface. Which JSA feature should you use in this scenario?

Accepted Answer

A)  Log Collector 
B)  Assets 
C)  Network Activity 
D)  Offense Manager 
A)  Log Collector 
B)  Assets 
C)  Network Activity 
D)  Offense Manager

Question 12

Which security log message format reduces the consumption of CPU and storage?

Accepted Answer

A)  WELF 
B)  BSD syslog 
C)  binary 
D)  structured syslog 
A)  WELF 
B)  BSD syslog 
C)  binary 
D)  structured syslog

Question 13

Your company has been assigned one public IP address. You want to enable Internet traffic to reach multiple servers in your DMZ that are configured with private IP addresses. In this scenario, which type of NAT would be used to accomplish this task?

Accepted Answer

A)  source NAT 
B)  destination NAT 
C)  NAT without PAT 
D)  static NAT 
A)  source NAT 
B)  destination NAT 
C)  NAT without PAT 
D)  static NAT

Question 14

Click the Exhibit button.   You have implemented SSL proxy client protection. After implementing this feature, your users are complaining about the warning message shown in the exhibit. Which action must you perform to eliminate the warning message?

Accepted Answer

A)  Configure the SRX Series device as a trusted site in the client Web browsers. 
B)  Regenerate the SRX self-signed CA certificate and include the correct organization name. 
C)  Import the SRX self-signed CA certificate into the client Web browsers. 
D)  Import the SRX self-signed CA certificate into the SRX certificate public store. 
A)  Configure the SRX Series device as a trusted site in the client Web browsers. 
B)  Regenerate the SRX self-signed CA certificate and include the correct organization name. 
C)  Import the SRX self-signed CA certificate into the client Web browsers. 
D)  Import the SRX self-signed CA certificate into the SRX certificate public store.

Question 15

Click the Exhibit button.   The output shown in the exhibit is displayed in which format?

Accepted Answer

A)  syslog 
B)  sd-syslog 
C)  binary 
D)  WELF 
A)  syslog 
B)  sd-syslog 
C)  binary 
D)  WELF

Question 16

What is the maximum number of supported interfaces on a vSRX hosted in a VMware environment?

Accepted Answer

A)  4 
B)  10 
C)  3 
D)  12 
A)  4 
B)  10 
C)  3 
D)  12

Question 17

Click the Exhibit button.   Which two statements describe the output shown in the exhibit? (Choose two.)

Accepted Answer

A)  Node 0 is passing traffic for redundancy group 1. 
B)  Redundancy group 1 experienced an operational failure. 
C)  Redundancy group 1 was administratively failed over. 
D)  Node 1 is passing traffic for redundancy group1. 
A)  Node 0 is passing traffic for redundancy group 1. 
B)  Redundancy group 1 experienced an operational failure. 
C)  Redundancy group 1 was administratively failed over. 
D)  Node 1 is passing traffic for redundancy group1.

Question 18

Which two statements are true about security policies in the factory-default configuration of an SRX340? (Choose two.)

Accepted Answer

A)  All traffic from the trust zone to the untrust zone is allowed. 
B)  All interzone traffic is denied. 
C)  All interzone traffic is allowed. 
D)  All traffic from the untrust zone to the trust zone is denied. 
A)  All traffic from the trust zone to the untrust zone is allowed. 
B)  All interzone traffic is denied. 
C)  All interzone traffic is allowed. 
D)  All traffic from the untrust zone to the trust zone is denied.

Question 19

Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)

Accepted Answer

A)  JIMS synchronizes Active Directory authentication information between a primary and secondary JIMS server. 
B)  JIMS forwards Active Directory authentication information to SRX Series client devices. 
C)  JIMS collects and maintains a database of authentication information from Active Directory domains. 
D)  JIMS replicates Active Directory authentication information to non-trusted Active Directory domain controllers. 
A)  JIMS synchronizes Active Directory authentication information between a primary and secondary JIMS server. 
B)  JIMS forwards Active Directory authentication information to SRX Series client devices. 
C)  JIMS collects and maintains a database of authentication information from Active Directory domains. 
D)  JIMS replicates Active Directory authentication information to non-trusted Active Directory domain controllers.

Question 20

What is the purpose of the Shadow Policies workspace in J-Web?

Accepted Answer

A)  The Shadow Policies workspace shows unused security policies due to policy overlap. 
B)  The Shadow Policies workspace shows used security policies due to policy overlap. 
C)  The Shadow Policies workspace shows unused IPS policies due to policy overlap. 
D)  The Shadow Policies workspace shows used IPS policies due to policy overlap. 
A)  The Shadow Policies workspace shows unused security policies due to policy overlap. 
B)  The Shadow Policies workspace shows used security policies due to policy overlap. 
C)  The Shadow Policies workspace shows unused IPS policies due to policy overlap. 
D)  The Shadow Policies workspace shows used IPS policies due to policy overlap.

Which UTM feature uses MIME pattern filters to identify traffic in HTTP and e-mail protocols?

Which statement describes stateless firewalls on SRX Series devices?

Which solution should you use if you want to detect known attacks using signature-based methods?

Which statement is correct about IKE?

Click the Exhibit button. Which two statements are true about the configuration shown in the exhibit? (Choose two.)

Which type of security policy protects restricted services from running on non-standard ports?

What is the definition of a zone on an SRX Series device?

What is the default session timeout value for ICMP and UDP traffic?

You want to use Sky ATP to protect your network; however, company policy does not allow you to send any files to the cloud. Which Sky ATP feature should you use in this situation?

What is the default timeout period for a TCP session in the session table of a Junos security device?

You have deployed JSA and you need to view events and network activity that match rule criteria. You must view this data using a single interface. Which JSA feature should you use in this scenario?

Which security log message format reduces the consumption of CPU and storage?

Your company has been assigned one public IP address. You want to enable Internet traffic to reach multiple servers in your DMZ that are configured with private IP addresses. In this scenario, which type of NAT would be used to accomplish this task?

Click the Exhibit button. You have implemented SSL proxy client protection. After implementing this feature, your users are complaining about the warning message shown in the exhibit. Which action must you perform to eliminate the warning message?

Click the Exhibit button. The output shown in the exhibit is displayed in which format?

What is the maximum number of supported interfaces on a vSRX hosted in a VMware environment?

Click the Exhibit button. Which two statements describe the output shown in the exhibit? (Choose two.)

Which two statements are true about security policies in the factory-default configuration of an SRX340? (Choose two.)

Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)

What is the purpose of the Shadow Policies workspace in J-Web?

Junos, Associate (JNCIA-Junos)

Data Center Design, Specialist (JNCDS-DC)

Security Design, Specialist (JNCDS-SEC)

Cloud, Associate

Security, Associate (JNCIA-SEC)

Mist AI, Associate (JNCIA-MistAI)

Security, Specialist

Enterprise Routing and Switching, Specialist

Service Provider Routing and Switching, Specialist

JCloud, Specialist (JNCIS-Cloud)

Mist AI, Specialist

Security, Professional

Enterprise Routing and Switching, Professional (JNCIP-ENT)

Service Provider Routing and Switching, Professional (JNCIP-SP)

New Data Center, Professional

Filters

Exam 5: Automation and DevOps, Associate

Which UTM feature uses MIME pattern filters to identify traffic in HTTP and e-mail protocols?

Which statement describes stateless firewalls on SRX Series devices?

Which solution should you use if you want to detect known attacks using signature-based methods?

Which statement is correct about IKE?

Click the Exhibit button. Which two statements are true about the configuration shown in the exhibit? (Choose two.)

Which type of security policy protects restricted services from running on non-standard ports?

What is the definition of a zone on an SRX Series device?

What is the default session timeout value for ICMP and UDP traffic?

You want to use Sky ATP to protect your network; however, company policy does not allow you to send any files to the cloud. Which Sky ATP feature should you use in this situation?

What is the default timeout period for a TCP session in the session table of a Junos security device?

You have deployed JSA and you need to view events and network activity that match rule criteria. You must view this data using a single interface. Which JSA feature should you use in this scenario?

Which security log message format reduces the consumption of CPU and storage?

Your company has been assigned one public IP address. You want to enable Internet traffic to reach multiple servers in your DMZ that are configured with private IP addresses. In this scenario, which type of NAT would be used to accomplish this task?

Click the Exhibit button. You have implemented SSL proxy client protection. After implementing this feature, your users are complaining about the warning message shown in the exhibit. Which action must you perform to eliminate the warning message?

Click the Exhibit button. The output shown in the exhibit is displayed in which format?

What is the maximum number of supported interfaces on a vSRX hosted in a VMware environment?

Click the Exhibit button. Which two statements describe the output shown in the exhibit? (Choose two.)

Which two statements are true about security policies in the factory-default configuration of an SRX340? (Choose two.)

Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)

What is the purpose of the Shadow Policies workspace in J-Web?

Junos, Associate (JNCIA-Junos)

Data Center Design, Specialist (JNCDS-DC)

Security Design, Specialist (JNCDS-SEC)

Cloud, Associate

Security, Associate (JNCIA-SEC)

Mist AI, Associate (JNCIA-MistAI)

Security, Specialist

Enterprise Routing and Switching, Specialist

Service Provider Routing and Switching, Specialist

JCloud, Specialist (JNCIS-Cloud)

Mist AI, Specialist

Security, Professional

Enterprise Routing and Switching, Professional (JNCIP-ENT)

Service Provider Routing and Switching, Professional (JNCIP-SP)

New Data Center, Professional

Filters