Quiz
Prova - Juniper - Sec 2
This quiz has a time limit, so it opens in the usual player.
Questions in this quiz (43)
1Which statement about IPsec is correct?
- AIPsec can be used to transport native Layer 2 packets
- BIPsec can provide encapsulation but not encryption
- CIPsec is a standards-based protocol
- DIPsec is used to provide data replication
2Which two statements are true? (Choose two.)
- ALogs for this security policy are generated.
- BLogs for this security policy are not generated.
- CTraffic static for this security policy are not generated.
- DTraffic statistics for this security policy are generated.
3Which statement about IPsec is correct?
- AIPsec can provide encryption but not data integrity
- BIPsec support packet fragmentation by intermediary devices.
- CIPsec support both tunnel and transport modes.
- DIPsec must use certificates to provide data encryption
4You configure and applied several global policies and some of the policies have overlapping match criteria.
- AThe first matched policy is the only policy applied.
- BIn this scenario, how are these global policies applies?
- CThe most restrictive that matches is applied.
- DThe least restrictive policy that matches is applied.
5You want to integrate an SRX Series device with SKY ATP. What is the first action to accomplish task?
- AIssue the commit script to register the SRX Series device.
- BCopy the operational script from the Sky ATP Web UI.
- CCreate an account with the Sky ATP Web UI.
- DCreate the SSL VPN tunnel between the SRX Series device and Sky ATP
6Which statements is correct about global security policies?
- AGlobal policies allow you to regulate traffic with addresses and applications, regardless of their security zones.
- BTraffic matching global is not added to the session table.
- CGlobal policies eliminate the need to assign interface to security zones.
- DGlobal security require you to identify a source and destination zone.
7On an SRX device, you want to regulate traffic base on network segments. In this scenario, what do you configure to accomplish this task?
- AALGs
- BScreens
- CZones
- DNAT
8A new SRX Series device has been delivered to your location. The device has the factory-default configuration loaded. You have powered on the device and connected to the console port.
What would you use to log into the device to begin the initial configuration?- AAdmin with password
- BAdmin with a password ''juniper''
- CRoot with a password of juniper''
- DRoot with no password
9You want to generate reports from the l-Web on an SRX Series device.
Which logging mode would you use in this scenario?- AStream
- BSyslog
- CLocal
- DEvent
10Which management software supports metadata-based security policies that are ideal for cloud deployments?
- ASky Enterprise
- BSecurity Director
- CNetwork Director
- DJ-Web
11Which two private cloud solution support vSRX devices? (Choose two.)
- AVMware Web Services (AWS)
- BAmazon Web Services (AWS)
- CContrail Cloud
- DVMware NSX
- EMicrosoft Azure
12You are configuring an IPsec VPN tunnel between two location on your network. Each packet must be encrypted and authenticated.
Which protocol would satisfy these requirements?- AMD5
- BESP
- CAH
- DSHA
13Which statements about NAT are correct? (Choose two.)
- AWhen multiple NAT rules have overlapping match conditions, the rule listed first is chosen
- BSource NAT translates the source port and destination IP address.
- CSource NAT translates the source IP address of packet.
- DWhen multiple NAT rules have overlapping match conditions, the most specific rule is chosen
14Which two statements are correct about functional zones? (Choose two.)
- AFunctional zones separate groups of users based on their function.
- BTraffic received on the management interface in the functional zone cannot transit out other interface.
- CA function is used for special purpose, such as management interface
- DA functional zone uses security policies to enforce rules for transit traffic.
15Which two statements are true about the null zone? (Choose two.)
- AAll interface belong to the null zone by default.
- BAll traffic to the null zone is allowed
- CAll traffic to the null zone is dropped.
- DThe null zone is a user-defined zone
16Which statements is correct about Junos security zones?
- AUser-defined security must contain at least one interface.
- BSecurity policies are referenced within a user-defined security zone
- CLogical interface are added to user defined security zones
- DUser-defined security must contains the key word ‘’zone’’
17Which statements is correct about SKY ATP?
- ASky ATP is an open-source security solution
- BSky ATP is used to automatically push out changes to the AppSecure suite
- CSky ATP only support sending threat feeds to vSRX Series devices
- DSky ATP is a cloud-based security threat analyzer that performs multiple tasks
18Which two segments describes IPsec VPNs? (Choose two.)
- AIPsec VPN traffic is always authenticated.
- BIPsec VPN traffic is always encrypted.
- CIPsec VPNs use security to secure traffic over a public network between two remote sites.
- DIPsec VPNs are dedicated physical connections between two private networks.
19The Sky ATP premium or basic-Threat Feed license is needed fort which two features? (Choose two.)
- AOutbound protection
- BC&C feeds
- CExecutable inspection
- DCustom feeds
20Host-inbound-traffic is configured on the DMZ zone and the ge-0/0/9.0 interface attached to that zone. Referring to the exhibit,
which to types of management traffic would be performed on the SRX Series device? (Choose two.)
- AHTTPS
- BSSH
- CFinger
- DHTTP
21Which two statements are true about security policy actions? (Choose two.)
- AThe reject action drops the traffic and sends a message to the source device.
- BThe deny action silently drop the traffic.
- CThe deny action drops the traffic and sends a message to the source device.
- DThe reject action silently drops the traffic
22Which flow module components handles processing for UTM?
- APolicy
- BZones
- CServices
- DScreen options
23What are the valid actions for a source NAT rule in J-Web? (choose three.)
- AOn
- BOff
- CSource
- Dinterface
- EPool
24Which three actions would be performed on traffic traversing an IPsec VPAN? (Choose three.)
- APort forwarding
- BAuthentication
- CEncryption
- DDeep inspection
- EPayload verification
25Which two statements are true about UTM on an SRX340? (Choose two.)
- AA default UTM policy is created.
- BNo default profile is created
- CNo default UTM policy is created
- DA default UTM profile is created
26BY default, revenue interface are placed into which system-defined security zone on an SRX series device?
- ATrust
- BNull
- CJunos-trust
- DUntrust
27Which two elements are needed on an SRX Series device to set up a remote syslog server? (Choose two.)
- AData type
- BData throughput
- CIP address
- DData size
28Which two match conditions would be used in both static NAT and destination NAT rule sets? (Choose two.)
- ADestination zone
- BDestination interface
- CSource interface
- DSource zone
29Which two statements are true regarding zone-based security policies? (Choose two.)
- AZone-based policies must reference a source address in the match criteria.
- BZone-based policies must reference a URL category in the match criteria.
- CZone-based policies must reference a destination address in the match criteria
- DZone-based policies must reference a dynamic application in the match criteria.
30What are two characteristic of static NAT SRX Series devices? (Choose two.)
- ASource and destination NAT rules take precedence over static NAT rules.
- BA reverse mapping rule is automatically created for the source translation.
- CStatic NAT rule take precedence over source and destination NAT rules.
- DStatic rules cannot coexist with destination NAT rules on the same SRX Series device configuration.
31You are concerned that unauthorized traffic is using non-standardized ports on your network.
In this scenario, which type of security feature should you implement?- AApplication firewall
- BSky ATP
- CFirewall filters
- DZone-based policies
32What are configuring the antispam UTM feature on an SRX Series device.
Which two actions would be performed by the SRX Series device for e-mail that is identified as spam? (Choose two.)- ATag the e-mail
- BQueue the e-mail
- CBlock the e-mail
- DQuarantine e-ma
33Which statement is correct regarding the interface configuration shown in the exhibit?
- AThe interface MTU has been increased
- BThe IP address has an invalid subnet mask
- CThe IP address is assigned to unit 0
- DThe interface is assigned to the trust zone by default
34If you need to protect against malicious files that might be download through Web-based e-mail, which Sky ATP protection mechanism should you use?
- AHTTP file inspection
- BIMAP file inspection
- CPOP3 file inspection
- DSMTP file inspection
35Which of the following are supported Mini-Physical Interface Modules (Mini-PIMs) on an SRX Series Services Gateways? (Choose three.)
- ADOCSIS
- B8-Port Gigabit Ethernet SFP XPIM
- CSerial
- D1-Port Gigabit Ethernet Small Form-Factor Pluggable (SFP)
36The vSRX is available for which two of the following hypervisors? (Choose two.)
- AHyper-V
- BOpenVZ
- CXen
- DKVM
37You are configuring an SRX Series device to inter-operate with a third-party IPsec VPN endpoint that uses policies to create the VPN. In this scenario, what must be configured for the VPN to work?
- APerfect forward secrecy
- BVPN monitoring
- CRe-keying
- DProxy IDs
38What match criteria does an SRX Series device’s network processing unit (NPU) use to determine if a flow already exists for a packet? (Choose three.)
- AMAC address
- Binbound interface
- CSource port
- Dunique session token number for a given zone and virtual router
- EProtocol
39After a packet is not able to be matched to an existing session, what is the next service to inspect the packet?
- Ascreens
- Bzones
- Cpolicy
- Dstatic NAT
40When traffic has met match criteria, what options are available to be performed on the traffic?
- Apermit
- Breject
- Cdeny
- Ddiscard
- Eredirect
41In the context of SRX Series devices, what services does fast-path processing skip? (Choose two.)
- Azones
- Bscreens
- Cservices ALG
- Dpolicy
42When does a Junos security device implement NAT?
- Afirst path processing only
- Bfast path processing only
- Cboth first path and fast path processing
- Dneither first path nor fast path processing
43Which order do Junos security devices examine policies for transit traffic?
- Adefault policy, zone policies, global policies
- Bzone policies, global policies, default policy
- Cglobal policies, zone policies, default policy
- Ddefault policy, global policies, zone policies
Information
- Description
- Segundo TICs Quiz on Prova - Juniper - Sec 2, created by Rodrigo Sousa on 02/10/2021.
- Author
- Rodrigo Sousa
- Language
- Português
- Views
- 10
- Tags
- Rating
- No ratings yet Rate this quiz