Exam 5: Automation and DevOps, Associate

Click the Exhibit button. Referring to the SRX Series flow module diagram shown in the exhibit, where is IDP/IPS processed?

Which statement is correct about global security policies?

You want to deploy vSRX in Amazon Web Services (AWS) virtual private clouds (VPCs). Which two statements are true in this scenario? (Choose two.)

Which method do VPNs use to prevent outside parties from viewing packets in clear text?

Which two statements describe IPsec VPNs? (Choose two.)

You have configured a Web filtering UTM policy. Which action must be performed before the Web filtering UTM policy takes effect?

When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)

You must ensure that all encrypted traffic passing through your SRX device uses strong protocols and ciphers. Which feature should you implement to satisfy this requirement?

Which two statements describe application-layer gateways (ALGs)? (Choose two.)

By default, revenue interfaces are placed into which system-defined security zone on an SRX Series device?

You want to automatically generate the encryption and authentication keys during IPsec VPN tunnel establishment. What would be used to accomplish this task?

Which statement is correct about Junos security zones?

You want to collect events and flows from third-party vendors. Which solution should you deploy to accomplish this task?

Click the Exhibit button. You have configured source NAT using an address pool as shown in the exhibit. Traffic is reaching the 203.0.113.6 server but return traffic is not being received by the SRX Series device. Which feature must be configured to allow return traffic to be accepted by the SRX Series device?

You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone. In this scenario, which statement is true?

You are designing a new security policy on an SRX Series device. You must block an application silently and log all occurrences of the application access attempts. In this scenario, which two actions must be enabled in the security policy? (Choose two.)

You want to deploy, manage, and configure multiple SRX Series devices without an on-premises software solution. Which solution would satisfy this requirement?

You must fine tune an IPS security policy to eliminate false positives. You want to create exemptions to the normal traffic examination for specific traffic. Which two parameters are required to accomplish this task? (Choose two.)

Which two actions are performed on an incoming packet matching an existing session? (Choose two.)