Question 1

What are two valid JIMS event log sources? (Choose two.)

Accepted Answer

A)  Microsoft Windows Server 2012 audit logs 
B)  Microsoft Active Directory server event logs 
C)  Microsoft Exchange Server event logs 
D)  Microsoft Active Directory audit logs 
A)  Microsoft Windows Server 2012 audit logs 
B)  Microsoft Active Directory server event logs 
C)  Microsoft Exchange Server event logs 
D)  Microsoft Active Directory audit logs

Question 2

You are using the JIMS Administrator user interface to add multiple SRX client devices. You must share common configuration attributes across the SRX clients without having to re-enter those attributes for each SRX client instance. Which JIMS Administrator feature would be used to accomplish this task?

Accepted Answer

A)  JIMS automation 
B)  JIMS templates 
C)  JIMS client profiles 
D)  JIMS client defaults 
A)  JIMS automation 
B)  JIMS templates 
C)  JIMS client profiles 
D)  JIMS client defaults

Question 3

Which three statements are true about the difference between cSRX-based virtual security deployments and vSRX-based virtual security deployments? (Choose three.)

Accepted Answer

A)  vSRX provides Layer 2 to Layer 7 secure services and cSRX provides Layer 4 to Layer 7 secure services. 
B)  cSRX requires less storage and memory space for a given deployment than vSRX-based solutions. 
C)  cSRX-based solutions are more scalable than vSRX-based solutions. 
D)  vSRX and cSRX both provide Layer 2 to Layer 7 secure services. 
E)  vSRX provides faster deployment time and faster reboots compared to cSRX. 
A)  vSRX provides Layer 2 to Layer 7 secure services and cSRX provides Layer 4 to Layer 7 secure services. 
B)  cSRX requires less storage and memory space for a given deployment than vSRX-based solutions. 
C)  cSRX-based solutions are more scalable than vSRX-based solutions. 
D)  vSRX and cSRX both provide Layer 2 to Layer 7 secure services. 
E)  vSRX provides faster deployment time and faster reboots compared to cSRX.

Question 4

Which statement is true about high availability (HA) chassis clusters for the SRX Series device?

Accepted Answer

A)  Cluster nodes require an upgrade to HA compliant Routing Engines. 
B)  Cluster nodes must be connected through a Layer 2 switch. 
C)  There can be active/passive or active/active clusters. 
D)  HA clusters must use NAT to prevent overlapping subnets between the nodes. 
A)  Cluster nodes require an upgrade to HA compliant Routing Engines. 
B)  Cluster nodes must be connected through a Layer 2 switch. 
C)  There can be active/passive or active/active clusters. 
D)  HA clusters must use NAT to prevent overlapping subnets between the nodes.

Question 5

You want to collect events and flows from third-party vendors. Which solution should you deploy to accomplish this task?

Accepted Answer

A)  Log Director 
B)  JSA 
C)  Policy Enforcer 
D)  Contrail 
A)  Log Director 
B)  JSA 
C)  Policy Enforcer 
D)  Contrail

Question 6

Which statement about the control link in a chassis cluster is correct?

Accepted Answer

A)  A cluster can have redundant control links. 
B)  Recovering from a control link failure requires a reboot. 
C)  The control link heartbeats contain the configuration file of the nodes. 
D)  The control messages sent over the link are encrypted by default. 
A)  A cluster can have redundant control links. 
B)  Recovering from a control link failure requires a reboot. 
C)  The control link heartbeats contain the configuration file of the nodes. 
D)  The control messages sent over the link are encrypted by default.

Question 7

Click the Exhibit button.   Referring to the exhibit, which statement is true?

Accepted Answer

A)  IDP blocks root users. IDP blocks root users. 
B)  IDP closes the connection on matched sessions. 
C)  IDP ignores the connection on matched sessions. 
D)  IDP blocks all users. 
A)  IDP blocks root users. IDP blocks root users. 
B)  IDP closes the connection on matched sessions. 
C)  IDP ignores the connection on matched sessions. 
D)  IDP blocks all users.

Question 8

What are two management methods for cSRX? (Choose two.)

Accepted Answer

A)  Network Director 
B)  J-Web 
C)  CLI 
D)  Contrail 
A)  Network Director 
B)  J-Web 
C)  CLI 
D)  Contrail

Question 9

Your network uses a remote e-mail server that is used to send and receive e-mails for your users. In this scenario, what should you do to protect users from receiving malicious files through e-mail?

Accepted Answer

A)  Deploy Sky ATP IMAP e-mail protection 
B)  Deploy Sky ATP MAPI e-mail protection 
C)  Deploy Sky ATP SMTP e-mail protection 
D)  Deploy Sky ATP POP3 e-mail protection 
A)  Deploy Sky ATP IMAP e-mail protection 
B)  Deploy Sky ATP MAPI e-mail protection 
C)  Deploy Sky ATP SMTP e-mail protection 
D)  Deploy Sky ATP POP3 e-mail protection

Question 10

Click the Exhibit button.   Which two statements are true about the configuration shown in the exhibit? (Choose two.)

Accepted Answer

A)  The session is removed from the session table after 10 seconds of inactivity. 
B)  The session is removed from the session table after 10 milliseconds of inactivity. 
C)  Aggressive aging is triggered if the session table reaches 95% capacity. 
D)  Aggressive aging is triggered if the session table reaches 80% capacity. 
A)  The session is removed from the session table after 10 seconds of inactivity. 
B)  The session is removed from the session table after 10 milliseconds of inactivity. 
C)  Aggressive aging is triggered if the session table reaches 95% capacity. 
D)  Aggressive aging is triggered if the session table reaches 80% capacity.

Question 11

You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution. Which action would accomplish this task?

Accepted Answer

A)  Configure a new anti-virus configuration rule. 
B)  Configure whitelist rules 
C)  Configure YARA rules. 
D)  Configure the SAML settings. 
A)  Configure a new anti-virus configuration rule. 
B)  Configure whitelist rules 
C)  Configure YARA rules. 
D)  Configure the SAML settings.

Question 12

The AppQoE module of AppSecure provides which function?

Accepted Answer

A)  The AppQoE module provides application-based routing. 
B)  The AppQoE module prioritizes important applications. 
C)  The AppQoE module provides routing, based on network conditions. 
D)  The AppQoE module blocks access to risky applications. 
A)  The AppQoE module provides application-based routing. 
B)  The AppQoE module prioritizes important applications. 
C)  The AppQoE module provides routing, based on network conditions. 
D)  The AppQoE module blocks access to risky applications.

Question 13

Data plane logging operates in which two modes? (Choose two.)

Accepted Answer

A)  syslog 
B)  binary 
C)  event 
D)  stream 
A)  syslog 
B)  binary 
C)  event 
D)  stream

Question 14

A routing change occurs on an SRX Series device that involves choosing a new egress interface. In this scenario, which statement is true for all affected current sessions?

Accepted Answer

A)  The current session are torn dowm only if the policy-rematch option has been enabled. The current session are torn dowm only if the policy-rematch option has been enabled. 
B)  The current sessions do not change. 
C)  The current sessions are torn down and go through first path processing based on the new route. 
D)  The current sessions might change based on the corresponding security policy. 
A)  The current session are torn dowm only if the policy-rematch option has been enabled. The current session are torn dowm only if the policy-rematch option has been enabled. 
B)  The current sessions do not change. 
C)  The current sessions are torn down and go through first path processing based on the new route. 
D)  The current sessions might change based on the corresponding security policy.

Question 15

What are two examples of RTOs? (Choose two.)

Accepted Answer

A)  IPsec SA entries 
B)  session table entries 
C)  fabric link probes 
D)  control link heartbeats 
A)  IPsec SA entries 
B)  session table entries 
C)  fabric link probes 
D)  control link heartbeats

Question 16

What are three primary functions of JATP? (Choose three.)

Accepted Answer

A)  detection 
B)  encryption 
C)  optimization 
D)  analytics 
E)  mitigation 
A)  detection 
B)  encryption 
C)  optimization 
D)  analytics 
E)  mitigation

Question 17

Which two statements describe client-protection SSL proxy on an SRX Series device? (Choose two.)

Accepted Answer

A)  The server-protection SSL proxy intercepts the server certificate. 
B)  The server-protection SSL proxy is also known as SSL reverse proxy. 
C)  The server-protection SSL proxy forwards the server certificate after modification. 
D)  The server-protection SSL proxy acts as the server from the client's perspective. 
A)  The server-protection SSL proxy intercepts the server certificate. 
B)  The server-protection SSL proxy is also known as SSL reverse proxy. 
C)  The server-protection SSL proxy forwards the server certificate after modification. 
D)  The server-protection SSL proxy acts as the server from the client's perspective.

Question 18

You want to deploy vSRX in Amazon Web Services (AWS) virtual private clouds (VPCs). Which two statements are true in this scenario? (Choose two.)

Accepted Answer

A)  The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Network Director instance. 
B)  MPLS LSPs can be used to connect vSRXs in different VPCs. 
C)  IPsec tunnels can be used to connect vSRX in different VPCs. 
D)  The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Security Director instance. 
A)  The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Network Director instance. 
B)  MPLS LSPs can be used to connect vSRXs in different VPCs. 
C)  IPsec tunnels can be used to connect vSRX in different VPCs. 
D)  The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Security Director instance.

Question 19

You want to use Sky ATP to protect your network; however, company policy does not allow you to send any files to the cloud. Which Sky ATP feature should you use in this situation?

Accepted Answer

A)  Only use on-premises local Sky ATP server anti-malware file scanning. 
B)  Only use cloud-based Sky ATP file hash lookups. 
C)  Only use on-box SRX anti-malware file scanning. 
D)  Only use cloud-based Sky ATP file blacklists. 
A)  Only use on-premises local Sky ATP server anti-malware file scanning. 
B)  Only use cloud-based Sky ATP file hash lookups. 
C)  Only use on-box SRX anti-malware file scanning. 
D)  Only use cloud-based Sky ATP file blacklists.

Question 20

Which two statements are true about virtualized SRX Series devices? (Choose two.)

Accepted Answer

A)  vSRX cannot be deployed in transparent mode. 
B)  cSRX can be deployed in routed mode. 
C)  cSRX cannot be deployed in routed mode. 
D)  vSRX can be deployed in transparent mode. 
A)  vSRX cannot be deployed in transparent mode. 
B)  cSRX can be deployed in routed mode. 
C)  cSRX cannot be deployed in routed mode. 
D)  vSRX can be deployed in transparent mode.

What are two valid JIMS event log sources? (Choose two.)

Which three statements are true about the difference between cSRX-based virtual security deployments and vSRX-based virtual security deployments? (Choose three.)

Which statement is true about high availability (HA) chassis clusters for the SRX Series device?

You want to collect events and flows from third-party vendors. Which solution should you deploy to accomplish this task?

Which statement about the control link in a chassis cluster is correct?

Click the Exhibit button. Referring to the exhibit, which statement is true?

What are two management methods for cSRX? (Choose two.)

Your network uses a remote e-mail server that is used to send and receive e-mails for your users. In this scenario, what should you do to protect users from receiving malicious files through e-mail?

Click the Exhibit button. Which two statements are true about the configuration shown in the exhibit? (Choose two.)

You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution. Which action would accomplish this task?

The AppQoE module of AppSecure provides which function?

Data plane logging operates in which two modes? (Choose two.)

A routing change occurs on an SRX Series device that involves choosing a new egress interface. In this scenario, which statement is true for all affected current sessions?

What are two examples of RTOs? (Choose two.)

What are three primary functions of JATP? (Choose three.)

Which two statements describe client-protection SSL proxy on an SRX Series device? (Choose two.)

You want to deploy vSRX in Amazon Web Services (AWS) virtual private clouds (VPCs). Which two statements are true in this scenario? (Choose two.)

You want to use Sky ATP to protect your network; however, company policy does not allow you to send any files to the cloud. Which Sky ATP feature should you use in this situation?

Which two statements are true about virtualized SRX Series devices? (Choose two.)

Junos, Associate (JNCIA-Junos)

Data Center Design, Specialist (JNCDS-DC)

Security Design, Specialist (JNCDS-SEC)

Cloud, Associate

Automation and DevOps, Associate

Mist AI, Associate (JNCIA-MistAI)

Security, Specialist

Enterprise Routing and Switching, Specialist

Service Provider Routing and Switching, Specialist

JCloud, Specialist (JNCIS-Cloud)

Mist AI, Specialist

Security, Professional

Enterprise Routing and Switching, Professional (JNCIP-ENT)

Service Provider Routing and Switching, Professional (JNCIP-SP)

New Data Center, Professional

Filters

Exam 6: Security, Associate (JNCIA-SEC)

What are two valid JIMS event log sources? (Choose two.)

Which three statements are true about the difference between cSRX-based virtual security deployments and vSRX-based virtual security deployments? (Choose three.)

Which statement is true about high availability (HA) chassis clusters for the SRX Series device?

You want to collect events and flows from third-party vendors. Which solution should you deploy to accomplish this task?

Which statement about the control link in a chassis cluster is correct?

Click the Exhibit button. Referring to the exhibit, which statement is true?

What are two management methods for cSRX? (Choose two.)

Your network uses a remote e-mail server that is used to send and receive e-mails for your users. In this scenario, what should you do to protect users from receiving malicious files through e-mail?

Click the Exhibit button. Which two statements are true about the configuration shown in the exhibit? (Choose two.)

You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution. Which action would accomplish this task?

The AppQoE module of AppSecure provides which function?

Data plane logging operates in which two modes? (Choose two.)

A routing change occurs on an SRX Series device that involves choosing a new egress interface. In this scenario, which statement is true for all affected current sessions?

What are two examples of RTOs? (Choose two.)

What are three primary functions of JATP? (Choose three.)

Which two statements describe client-protection SSL proxy on an SRX Series device? (Choose two.)

You want to deploy vSRX in Amazon Web Services (AWS) virtual private clouds (VPCs). Which two statements are true in this scenario? (Choose two.)

You want to use Sky ATP to protect your network; however, company policy does not allow you to send any files to the cloud. Which Sky ATP feature should you use in this situation?

Which two statements are true about virtualized SRX Series devices? (Choose two.)

Junos, Associate (JNCIA-Junos)

Data Center Design, Specialist (JNCDS-DC)

Security Design, Specialist (JNCDS-SEC)

Cloud, Associate

Automation and DevOps, Associate

Mist AI, Associate (JNCIA-MistAI)

Security, Specialist

Enterprise Routing and Switching, Specialist

Service Provider Routing and Switching, Specialist

JCloud, Specialist (JNCIS-Cloud)

Mist AI, Specialist

Security, Professional

Enterprise Routing and Switching, Professional (JNCIP-ENT)

Service Provider Routing and Switching, Professional (JNCIP-SP)

New Data Center, Professional

Filters