Question 1

What are two management methods for cSRX? (Choose two.)

Accepted Answer

A)  Network Director 
B)  J-Web 
C)  CLI 
D)  Contrail 
A)  Network Director 
B)  J-Web 
C)  CLI 
D)  Contrail

Question 2

You want to deploy vSRX in Amazon Web Services (AWS) virtual private clouds (VPCs). Which two statements are true in this scenario? (Choose two.)

Accepted Answer

A)  The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Network Director instance. 
B)  MPLS LSPs can be used to connect vSRXs in different VPCs. 
C)  IPsec tunnels can be used to connect vSRX in different VPCs. 
D)  The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Security Director instance. 
A)  The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Network Director instance. 
B)  MPLS LSPs can be used to connect vSRXs in different VPCs. 
C)  IPsec tunnels can be used to connect vSRX in different VPCs. 
D)  The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Security Director instance.

Question 3

Which statement is true about JATP incidents?

Accepted Answer

A)  Incidents have an associated threat number assigned to them. 
B)  Incidents are sorted by category, followed by severity. 
C)  Incidents consist of all the events associated with a single threat. 
D)  Incidents are always automatically mitigated. 
A)  Incidents have an associated threat number assigned to them. 
B)  Incidents are sorted by category, followed by severity. 
C)  Incidents consist of all the events associated with a single threat. 
D)  Incidents are always automatically mitigated.

Question 4

Which statement describes the AppTrack module in AppSecure?

Accepted Answer

A)  The AppTrack module provides enforcement with the ability to block traffic, based on specific applications. 
B)  The AppTrack module provides control by the routing of traffic, based on the application. 
C)  The AppTrack module identifies the applications that are present in network traffic. 
D)  The AppTrack module provides visibility and volumetric reporting of application usage on the network. 
A)  The AppTrack module provides enforcement with the ability to block traffic, based on specific applications. 
B)  The AppTrack module provides control by the routing of traffic, based on the application. 
C)  The AppTrack module identifies the applications that are present in network traffic. 
D)  The AppTrack module provides visibility and volumetric reporting of application usage on the network.

Question 5

When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)

Accepted Answer

A)  A security policy can reference both a client-protection SSL proxy profile and a server-protection proxy profile. 
B)  If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is not decrypted. 
C)  A security policy can only reference a client-protection SSL proxy profile or a server-protection SSL proxy profile. 
D)  If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is decrypted. 
A)  A security policy can reference both a client-protection SSL proxy profile and a server-protection proxy profile. 
B)  If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is not decrypted. 
C)  A security policy can only reference a client-protection SSL proxy profile or a server-protection SSL proxy profile. 
D)  If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is decrypted.

Question 6

Which three features are parts of Juniper Networks' AppSecure suite? (Choose three.)

Accepted Answer

A)  AppQoE 
B)  APBR 
C)  Secure Application Manager 
D)  AppQoS 
E)  AppFormix 
A)  AppQoE 
B)  APBR 
C)  Secure Application Manager 
D)  AppQoS 
E)  AppFormix

Question 7

Which two statements are true about virtualized SRX Series devices? (Choose two.)

Accepted Answer

A)  vSRX cannot be deployed in transparent mode. 
B)  cSRX can be deployed in routed mode. 
C)  cSRX cannot be deployed in routed mode. 
D)  vSRX can be deployed in transparent mode. 
A)  vSRX cannot be deployed in transparent mode. 
B)  cSRX can be deployed in routed mode. 
C)  cSRX cannot be deployed in routed mode. 
D)  vSRX can be deployed in transparent mode.

Question 8

Click the Exhibit button.   Referring to the configuration shown in the exhibit, which two statements are true? (Choose two.)

Accepted Answer

A)  The log is being stored on the local Routing Engine. 
B)  The log is being sent to a remote server. 
C)  The syslog is configured for a user facility. The syslog is configured for a user facility. 
D)  The syslog is configured for an info facility. The syslog is configured for an info 
A)  The log is being stored on the local Routing Engine. 
B)  The log is being sent to a remote server. 
C)  The syslog is configured for a user facility. The syslog is configured for a user facility. 
D)  The syslog is configured for an info facility. The syslog is configured for an info

Question 9

Click the Exhibit button.   You are configuring an SRX chassis cluster with the node-specific hostname and management address. Referring to the exhibit, which configuration completes this requirement?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 10

Which two solutions provide a sandboxing feature for finding zero-day malware threats? (Choose two.)

Accepted Answer

A)  Sky ATP 
B)  UTM 
C)  JATP 
D)  IPS 
A)  Sky ATP 
B)  UTM 
C)  JATP 
D)  IPS

Question 11

Which two protocols are supported for Sky ATP advanced anti-malware scanning? (Choose two.)

Accepted Answer

A)  POP3 
B)  MAPI 
C)  IMAP 
D)  SMTP 
A)  POP3 
B)  MAPI 
C)  IMAP 
D)  SMTP

Question 12

Which statement is true about JATP incidents?

Accepted Answer

A)  Incidents have an associated threat number assigned to them. 
B)  Incidents are sorted by category, followed by severity. 
C)  Incidents consist of all the events associated with a single threat. 
D)  Incidents are always automatically mitigated. 
A)  Incidents have an associated threat number assigned to them. 
B)  Incidents are sorted by category, followed by severity. 
C)  Incidents consist of all the events associated with a single threat. 
D)  Incidents are always automatically mitigated.

Question 13

You must ensure that all encrypted traffic passing through your SRX device uses strong protocols and ciphers. Which feature should you implement to satisfy this requirement?

Accepted Answer

A)  SSL proxy 
B)  AppSecure 
C)  JIMS 
D)  JATP 
A)  SSL proxy 
B)  AppSecure 
C)  JIMS 
D)  JATP

Question 14

You are deploying the Junos application firewall feature in your network. In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)

Accepted Answer

A)  destination port 
B)  source port 
C)  destination IP address 
D)  source IP address 
A)  destination port 
B)  source port 
C)  destination IP address 
D)  source IP address

Question 15

Which two settings must be enabled on the hypervisor in a vSRX deployment to ensure proper chassis cluster operation? (Choose two.)

Accepted Answer

A)  Control links must operate in promiscuous mode. 
B)  Control links must have an MTU of 9000. 
C)  Fabric links must operate in promiscuous mode. 
D)  Fabric links must have an MTU of 9000. 
A)  Control links must operate in promiscuous mode. 
B)  Control links must have an MTU of 9000. 
C)  Fabric links must operate in promiscuous mode. 
D)  Fabric links must have an MTU of 9000.

Question 16

Click the Exhibit button.   Referring to the exhibit, which two devices are considered to be part of the secure fabric site with Policy Enforcer? (Choose two.)

Accepted Answer

A)  Server-2 
B)  SRX-1 
C)  Server-1 
D)  QFX-1 
A)  Server-2 
B)  SRX-1 
C)  Server-1 
D)  QFX-1

Question 17

You are asked to improve resiliency for individual redundancy groups in an SRX4600 chassis cluster. Which two features would accomplish this task? (Choose two.)

Accepted Answer

A)  IP address monitoring 
B)  control link recovery 
C)  interface monitoring 
D)  dual fabric links 
A)  IP address monitoring 
B)  control link recovery 
C)  interface monitoring 
D)  dual fabric links

Question 18

What are two elements of a custom IDP/IPS attack object? (Choose two.)

Accepted Answer

A)  the attack signature 
B)  the severity of the attack 
C)  the destination zone 
D)  the exempt rulebase 
A)  the attack signature 
B)  the severity of the attack 
C)  the destination zone 
D)  the exempt rulebase

Question 19

You must configure JSA to accept events from an unsupported third-party log source. In this scenario, what should you do?

Accepted Answer

A)  Separate event collection and flow collection on separate collectors. 
B)  Configure an RPM for a third-party device service module. 
C)  Configure JSA to silently discard unsupported log types. 
D)  Configure a universal device service module. 
A)  Separate event collection and flow collection on separate collectors. 
B)  Configure an RPM for a third-party device service module. 
C)  Configure JSA to silently discard unsupported log types. 
D)  Configure a universal device service module.

Question 20

Which statement describes the AppTrack module in AppSecure?

Accepted Answer

A)  The AppTrack module provides enforcement with the ability to block traffic, based on specific applications. 
B)  The AppTrack module provides control by the routing of traffic, based on the application. 
C)  The AppTrack module identifies the applications that are present in network traffic. 
D)  The AppTrack module provides visibility and volumetric reporting of application usage on the network. 
A)  The AppTrack module provides enforcement with the ability to block traffic, based on specific applications. 
B)  The AppTrack module provides control by the routing of traffic, based on the application. 
C)  The AppTrack module identifies the applications that are present in network traffic. 
D)  The AppTrack module provides visibility and volumetric reporting of application usage on the network.

What are two management methods for cSRX? (Choose two.)

You want to deploy vSRX in Amazon Web Services (AWS) virtual private clouds (VPCs). Which two statements are true in this scenario? (Choose two.)

Which statement is true about JATP incidents?

Which statement describes the AppTrack module in AppSecure?

When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)

Which three features are parts of Juniper Networks' AppSecure suite? (Choose three.)

Which two statements are true about virtualized SRX Series devices? (Choose two.)

Click the Exhibit button. Referring to the configuration shown in the exhibit, which two statements are true? (Choose two.)

Click the Exhibit button. You are configuring an SRX chassis cluster with the node-specific hostname and management address. Referring to the exhibit, which configuration completes this requirement?

Which two solutions provide a sandboxing feature for finding zero-day malware threats? (Choose two.)

Which two protocols are supported for Sky ATP advanced anti-malware scanning? (Choose two.)

Which statement is true about JATP incidents?

You must ensure that all encrypted traffic passing through your SRX device uses strong protocols and ciphers. Which feature should you implement to satisfy this requirement?

You are deploying the Junos application firewall feature in your network. In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)

Which two settings must be enabled on the hypervisor in a vSRX deployment to ensure proper chassis cluster operation? (Choose two.)

Click the Exhibit button. Referring to the exhibit, which two devices are considered to be part of the secure fabric site with Policy Enforcer? (Choose two.)

You are asked to improve resiliency for individual redundancy groups in an SRX4600 chassis cluster. Which two features would accomplish this task? (Choose two.)

What are two elements of a custom IDP/IPS attack object? (Choose two.)

You must configure JSA to accept events from an unsupported third-party log source. In this scenario, what should you do?

Which statement describes the AppTrack module in AppSecure?

Junos, Associate (JNCIA-Junos)

Data Center Design, Specialist (JNCDS-DC)

Security Design, Specialist (JNCDS-SEC)

Cloud, Associate

Automation and DevOps, Associate

Mist AI, Associate (JNCIA-MistAI)

Security, Specialist

Enterprise Routing and Switching, Specialist

Service Provider Routing and Switching, Specialist

JCloud, Specialist (JNCIS-Cloud)

Mist AI, Specialist

Security, Professional

Enterprise Routing and Switching, Professional (JNCIP-ENT)

Service Provider Routing and Switching, Professional (JNCIP-SP)

New Data Center, Professional

Filters

Exam 6: Security, Associate (JNCIA-SEC)

What are two management methods for cSRX? (Choose two.)

You want to deploy vSRX in Amazon Web Services (AWS) virtual private clouds (VPCs). Which two statements are true in this scenario? (Choose two.)

Which statement is true about JATP incidents?

Which statement describes the AppTrack module in AppSecure?

When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)

Which three features are parts of Juniper Networks' AppSecure suite? (Choose three.)

Which two statements are true about virtualized SRX Series devices? (Choose two.)

Click the Exhibit button. Referring to the configuration shown in the exhibit, which two statements are true? (Choose two.)

Click the Exhibit button. You are configuring an SRX chassis cluster with the node-specific hostname and management address. Referring to the exhibit, which configuration completes this requirement?

Which two solutions provide a sandboxing feature for finding zero-day malware threats? (Choose two.)

Which two protocols are supported for Sky ATP advanced anti-malware scanning? (Choose two.)

Which statement is true about JATP incidents?

You must ensure that all encrypted traffic passing through your SRX device uses strong protocols and ciphers. Which feature should you implement to satisfy this requirement?

You are deploying the Junos application firewall feature in your network. In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)

Which two settings must be enabled on the hypervisor in a vSRX deployment to ensure proper chassis cluster operation? (Choose two.)

Click the Exhibit button. Referring to the exhibit, which two devices are considered to be part of the secure fabric site with Policy Enforcer? (Choose two.)

You are asked to improve resiliency for individual redundancy groups in an SRX4600 chassis cluster. Which two features would accomplish this task? (Choose two.)

What are two elements of a custom IDP/IPS attack object? (Choose two.)

You must configure JSA to accept events from an unsupported third-party log source. In this scenario, what should you do?

Which statement describes the AppTrack module in AppSecure?

Junos, Associate (JNCIA-Junos)

Data Center Design, Specialist (JNCDS-DC)

Security Design, Specialist (JNCDS-SEC)

Cloud, Associate

Automation and DevOps, Associate

Mist AI, Associate (JNCIA-MistAI)

Security, Specialist

Enterprise Routing and Switching, Specialist

Service Provider Routing and Switching, Specialist

JCloud, Specialist (JNCIS-Cloud)

Mist AI, Specialist

Security, Professional

Enterprise Routing and Switching, Professional (JNCIP-ENT)

Service Provider Routing and Switching, Professional (JNCIP-SP)

New Data Center, Professional

Filters