Exam 6: Security, Associate (JNCIA-SEC)

The DNS ALG performs which three functions? (Choose three.)

What are two types of attack objects used by IPS on SRX Series devices? (Choose two.)

How many nodes are configurable in a chassis cluster using SRX Series devices?

Which three statements are correct about fabric interfaces on the SRX5800? (Choose three.)

Where is AppSecure executed in the flow process on an SRX Series device?

Which two statements describe application-layer gateways (ALGs)? (Choose two.)

Click the Exhibit button. Which two statements describe the output shown in the exhibit? (Choose two.)

You have deployed JSA and you need to view events and network activity that match rule criteria. You must view this data using a single interface. Which JSA feature should you use in this scenario?

Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)

You must ensure that all encrypted traffic passing through your SRX device uses strong protocols and ciphers. Which feature should you implement to satisfy this requirement?

Click the Exhibit button. Referring to the exhibit, which statement is true?

What are two elements of a custom IDP/IPS attack object? (Choose two.)

You are deploying a vSRX into a vSphere environment which applies the configuration from a bootable ISO file containing the juniper.conf file. After the vSRX boots and has the configuration applied, you make additional device specific configuration changes, commit, and reboot the device. Once the device finishes rebooting, you notice the specific changes you made are missing but the original configuration is applied. In this scenario, what is the problem?

Click the Exhibit button. Referring to the SRX Series flow module diagram shown in the exhibit, where is IDP/IPS processed?

Which three features are parts of Juniper Networks' AppSecure suite? (Choose three.)

After a software upgrade on an SRX5800 chassis cluster, you notice that both node0 and node1 are in the primary state, when node1 should be secondary. All control and fabric links are operating normally. In this scenario, which step must you perform to recover the cluster?

Which default protocol and port are used for JIMS to SRX client communication?

Click the Exhibit button. Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer. To complete this task, where should you configure the default gateway for the User-1 device?

When working with network events on a Juniper Secure Analytics device, flow records come from which source?

What are two types of attack objects used by IPS on SRX Series devices? (Choose two.)