Question 1

When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)

Accepted Answer

A)  A security policy can reference both a client-protection SSL proxy profile and a server-protection proxy profile. 
B)  If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is not decrypted. 
C)  A security policy can only reference a client-protection SSL proxy profile or a server-protection SSL proxy profile. 
D)  If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is decrypted. 
A)  A security policy can reference both a client-protection SSL proxy profile and a server-protection proxy profile. 
B)  If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is not decrypted. 
C)  A security policy can only reference a client-protection SSL proxy profile or a server-protection SSL proxy profile. 
D)  If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is decrypted. A,D

Question 2

Click the Exhibit button.   Referring to the exhibit, which two values in the JIMS SRX client configuration must match the values configured on the SRX client? (Choose two.)

Accepted Answer

A)  IPv6 Reporting 
B)  Client ID 
C)  Client Secret 
D)  Token Lifetime 
A)  IPv6 Reporting 
B)  Client ID 
C)  Client Secret 
D)  Token Lifetime B,C

Question 3

What is the maximum number of supported interfaces on a vSRX hosted in a VMware environment?

Accepted Answer

A)  4 
B)  10 
C)  3 
D)  12 
A)  4 
B)  10 
C)  3 
D)  12 B

Question 4

What are two examples of RTOs? (Choose two.)

Accepted Answer

A)  IPsec SA entries 
B)  session table entries 
C)  fabric link probes 
D)  control link heartbeats 
A)  IPsec SA entries 
B)  session table entries 
C)  fabric link probes 
D)  control link heartbeats

Question 5

Your manager asks you to find employees that are watching YouTube during office hours. Which AppSecure component would you configure to accomplish this task?

Accepted Answer

A)  AppQoE 
B)  AppFW 
C)  AppTrack 
D)  AppQoS 
A)  AppQoE 
B)  AppFW 
C)  AppTrack 
D)  AppQoS

Question 6

Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

Accepted Answer

A)  scheduler 
B)  pass-through authentication 
C)  ALGs 
D)  counters 
A)  scheduler 
B)  pass-through authentication 
C)  ALGs 
D)  counters

Question 7

Click the Exhibit button.   The output shown in the exhibit is displayed in which format?

Accepted Answer

A)  syslog 
B)  sd-syslog 
C)  binary 
D)  WELF 
A)  syslog 
B)  sd-syslog 
C)  binary 
D)  WELF

Question 8

The DNS ALG performs which three functions? (Choose three.)

Accepted Answer

A)  The DNS ALG performs the IPv4 and IPV6 address transformations. 
B)  The DNS ALG performs DNS doctoring. 
C)  The DNS ALG modifies the DNS payload in NAT mode. 
D)  The DNS ALG performs DNSSEC. 
E)  The DNS ALG performs DNS load balancing. 
A)  The DNS ALG performs the IPv4 and IPV6 address transformations. 
B)  The DNS ALG performs DNS doctoring. 
C)  The DNS ALG modifies the DNS payload in NAT mode. 
D)  The DNS ALG performs DNSSEC. 
E)  The DNS ALG performs DNS load balancing.

Question 9

Click the Exhibit button.   You have deployed Sky ATP to protect your network from attacks so that users are unable to download malicious files. However, after a user attempts to download a malicious file, they are still able to communicate through the SRX Series device. Referring to the exhibit, which statement is correct?

Accepted Answer

A)  Change the security policy from a standard security policy to a unified security policy. 
B)  Remove the fallback options in the advanced anti-malware policy. 
C)  Configure a security intelligence policy and apply it to the security policy. 
D)  Lower the verdict threshold in the advanced anti-malware policy. 
A)  Change the security policy from a standard security policy to a unified security policy. 
B)  Remove the fallback options in the advanced anti-malware policy. 
C)  Configure a security intelligence policy and apply it to the security policy. 
D)  Lower the verdict threshold in the advanced anti-malware policy.

Question 10

You want to support reth LAG interfaces on a chassis cluster. What must be enabled on the interconnecting switch to accomplish this task?

Accepted Answer

A)  RSTP 
B)  802.3ad 
C)  LLDP 
D)  swfab 
A)  RSTP 
B)  802.3ad 
C)  LLDP 
D)  swfab

Question 11

You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone. In this scenario, which statement is true?

Accepted Answer

A)  You must enable the AppTrack feature within the Internet zone configuration. 
B)  You must enable the AppTrack feature within the ingress interface configuration associated with the Internet zone. 
C)  You must enable the AppTrack feature within the interface configuration associated with the User zone. 
D)  You must enable the AppTrack feature within the User zone configuration. 
A)  You must enable the AppTrack feature within the Internet zone configuration. 
B)  You must enable the AppTrack feature within the ingress interface configuration associated with the Internet zone. 
C)  You must enable the AppTrack feature within the interface configuration associated with the User zone. 
D)  You must enable the AppTrack feature within the User zone configuration.

Question 12

You must fine tune an IPS security policy to eliminate false positives. You want to create exemptions to the normal traffic examination for specific traffic. Which two parameters are required to accomplish this task? (Choose two.)

Accepted Answer

A)  source IP address 
B)  destination IP address 
C)  destination port 
D)  source port 
A)  source IP address 
B)  destination IP address 
C)  destination port 
D)  source port

Question 13

Click the Exhibit button.   The output shown in the exhibit is displayed in which format?

Accepted Answer

A)  syslog 
B)  WELF 
C)  binary 
D)  sd-syslog 
A)  syslog 
B)  WELF 
C)  binary 
D)  sd-syslog

Question 14

Click the Exhibit button.   You have implemented SSL proxy client protection. After implementing this feature, your users are complaining about the warning message shown in the exhibit. Which action must you perform to eliminate the warning message?

Accepted Answer

A)  Configure the SRX Series device as a trusted site in the client Web browsers. 
B)  Regenerate the SRX self-signed CA certificate and include the correct organization name. 
C)  Import the SRX self-signed CA certificate into the client Web browsers. 
D)  Import the SRX self-signed CA certificate into the SRX certificate public store. 
A)  Configure the SRX Series device as a trusted site in the client Web browsers. 
B)  Regenerate the SRX self-signed CA certificate and include the correct organization name. 
C)  Import the SRX self-signed CA certificate into the client Web browsers. 
D)  Import the SRX self-signed CA certificate into the SRX certificate public store.

Question 15

Which two statements describe application-layer gateways (ALGs)? (Choose two.)

Accepted Answer

A)  ALGs are designed for specific protocols that require multiple sessions. 
B)  ALGs are used with protocols that use multiple ports. 
C)  ALGs can only be configured using Security Director. 
D)  ALGs are designed for specific protocols that use a single TCP session. 
A)  ALGs are designed for specific protocols that require multiple sessions. 
B)  ALGs are used with protocols that use multiple ports. 
C)  ALGs can only be configured using Security Director. 
D)  ALGs are designed for specific protocols that use a single TCP session.

Question 16

Which two statements describe JSA? (Choose two.)

Accepted Answer

A)  Security Director must be used to view third-party events rom JSA flow collectors. 
B)  JSA supports events and flows from Junos devices, including third-party devices. 
C)  JSA events must be manually imported into Security Directory using an SSH connection. 
D)  JSA can be used as a log node with Security Director or as a standalone solution. 
A)  Security Director must be used to view third-party events rom JSA flow collectors. 
B)  JSA supports events and flows from Junos devices, including third-party devices. 
C)  JSA events must be manually imported into Security Directory using an SSH connection. 
D)  JSA can be used as a log node with Security Director or as a standalone solution.

Question 17

You must deploy AppSecure in your network to block risky applications. In this scenario, which two AppSecure features are required? (Choose two.)

Accepted Answer

A)  AppFW 
B)  AppID 
C)  APBR 
D)  AppTrack 
A)  AppFW 
B)  AppID 
C)  APBR 
D)  AppTrack

Question 18

You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone. In this scenario, which statement is true?

Accepted Answer

A)  You must enable the AppTrack feature within the Internet zone configuration. 
B)  You must enable the AppTrack feature within the ingress interface configuration associated with the Internet zone. 
C)  You must enable the AppTrack feature within the interface configuration associated with the User zone. 
D)  You must enable the AppTrack feature within the User zone configuration. 
A)  You must enable the AppTrack feature within the Internet zone configuration. 
B)  You must enable the AppTrack feature within the ingress interface configuration associated with the Internet zone. 
C)  You must enable the AppTrack feature within the interface configuration associated with the User zone. 
D)  You must enable the AppTrack feature within the User zone configuration.

Question 19

What is the default timeout period for a TCP session in the session table of a Junos security device?

Accepted Answer

A)  1 minute 
B)  60 minutes 
C)  15 minutes 
D)  30 minutes 
A)  1 minute 
B)  60 minutes 
C)  15 minutes 
D)  30 minutes

Question 20

Click the Exhibit button.   You need to have the JATP solution analyzer .jar, .xls, and .doc files. Referring to the exhibit, which two file types must be selected to accomplish this task? (Choose two.)

Accepted Answer

A)  Java 
B)  library 
C)  document 
D)  executable 
A)  Java 
B)  library 
C)  document 
D)  executable

When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)

Click the Exhibit button. Referring to the exhibit, which two values in the JIMS SRX client configuration must match the values configured on the SRX client? (Choose two.)

What is the maximum number of supported interfaces on a vSRX hosted in a VMware environment?

What are two examples of RTOs? (Choose two.)

Your manager asks you to find employees that are watching YouTube during office hours. Which AppSecure component would you configure to accomplish this task?

Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

Click the Exhibit button. The output shown in the exhibit is displayed in which format?

The DNS ALG performs which three functions? (Choose three.)

You want to support reth LAG interfaces on a chassis cluster. What must be enabled on the interconnecting switch to accomplish this task?

You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone. In this scenario, which statement is true?

You must fine tune an IPS security policy to eliminate false positives. You want to create exemptions to the normal traffic examination for specific traffic. Which two parameters are required to accomplish this task? (Choose two.)

Click the Exhibit button. The output shown in the exhibit is displayed in which format?

Click the Exhibit button. You have implemented SSL proxy client protection. After implementing this feature, your users are complaining about the warning message shown in the exhibit. Which action must you perform to eliminate the warning message?

Which two statements describe application-layer gateways (ALGs)? (Choose two.)

Which two statements describe JSA? (Choose two.)

You must deploy AppSecure in your network to block risky applications. In this scenario, which two AppSecure features are required? (Choose two.)

You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone. In this scenario, which statement is true?

What is the default timeout period for a TCP session in the session table of a Junos security device?

Click the Exhibit button. You need to have the JATP solution analyzer .jar, .xls, and .doc files. Referring to the exhibit, which two file types must be selected to accomplish this task? (Choose two.)

Junos, Associate (JNCIA-Junos)

Data Center Design, Specialist (JNCDS-DC)

Security Design, Specialist (JNCDS-SEC)

Cloud, Associate

Automation and DevOps, Associate

Mist AI, Associate (JNCIA-MistAI)

Security, Specialist

Enterprise Routing and Switching, Specialist

Service Provider Routing and Switching, Specialist

JCloud, Specialist (JNCIS-Cloud)

Mist AI, Specialist

Security, Professional

Enterprise Routing and Switching, Professional (JNCIP-ENT)

Service Provider Routing and Switching, Professional (JNCIP-SP)

New Data Center, Professional

Filters

Exam 6: Security, Associate (JNCIA-SEC)

When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)

Click the Exhibit button. Referring to the exhibit, which two values in the JIMS SRX client configuration must match the values configured on the SRX client? (Choose two.)

What is the maximum number of supported interfaces on a vSRX hosted in a VMware environment?

What are two examples of RTOs? (Choose two.)

Your manager asks you to find employees that are watching YouTube during office hours. Which AppSecure component would you configure to accomplish this task?

Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

Click the Exhibit button. The output shown in the exhibit is displayed in which format?

The DNS ALG performs which three functions? (Choose three.)

You want to support reth LAG interfaces on a chassis cluster. What must be enabled on the interconnecting switch to accomplish this task?

You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone. In this scenario, which statement is true?

You must fine tune an IPS security policy to eliminate false positives. You want to create exemptions to the normal traffic examination for specific traffic. Which two parameters are required to accomplish this task? (Choose two.)

Click the Exhibit button. The output shown in the exhibit is displayed in which format?

Click the Exhibit button. You have implemented SSL proxy client protection. After implementing this feature, your users are complaining about the warning message shown in the exhibit. Which action must you perform to eliminate the warning message?

Which two statements describe application-layer gateways (ALGs)? (Choose two.)

Which two statements describe JSA? (Choose two.)

You must deploy AppSecure in your network to block risky applications. In this scenario, which two AppSecure features are required? (Choose two.)

You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone. In this scenario, which statement is true?

What is the default timeout period for a TCP session in the session table of a Junos security device?

Click the Exhibit button. You need to have the JATP solution analyzer .jar, .xls, and .doc files. Referring to the exhibit, which two file types must be selected to accomplish this task? (Choose two.)

Junos, Associate (JNCIA-Junos)

Data Center Design, Specialist (JNCDS-DC)

Security Design, Specialist (JNCDS-SEC)

Cloud, Associate

Automation and DevOps, Associate

Mist AI, Associate (JNCIA-MistAI)

Security, Specialist

Enterprise Routing and Switching, Specialist

Service Provider Routing and Switching, Specialist

JCloud, Specialist (JNCIS-Cloud)

Mist AI, Specialist

Security, Professional

Enterprise Routing and Switching, Professional (JNCIP-ENT)

Service Provider Routing and Switching, Professional (JNCIP-SP)

New Data Center, Professional

Filters