The document contains multiple choice questions about Juniper SRX devices and services. Supported Mini-PIMs on SRX devices include 1-Port SFP and Serial. SRX650 and SRX340 support PoE. A default SRX300 configuration includes an untrust zone and DHCP client. The vSRX is available on Hyper-V and KVM hypervisors.
The document contains multiple choice questions about Juniper SRX devices and services. Supported Mini-PIMs on SRX devices include 1-Port SFP and Serial. SRX650 and SRX340 support PoE. A default SRX300 configuration includes an untrust zone and DHCP client. The vSRX is available on Hyper-V and KVM hypervisors.
The document contains multiple choice questions about Juniper SRX devices and services. Supported Mini-PIMs on SRX devices include 1-Port SFP and Serial. SRX650 and SRX340 support PoE. A default SRX300 configuration includes an untrust zone and DHCP client. The vSRX is available on Hyper-V and KVM hypervisors.
The document contains multiple choice questions about Juniper SRX devices and services. Supported Mini-PIMs on SRX devices include 1-Port SFP and Serial. SRX650 and SRX340 support PoE. A default SRX300 configuration includes an untrust zone and DHCP client. The vSRX is available on Hyper-V and KVM hypervisors.
Download as DOCX, PDF, TXT or read online from Scribd
Download as docx, pdf, or txt
You are on page 1of 7
Which of the following are supported Mini-Physical Interface Modules (Mini-
PIMs) on an SRX Series Services Gateways? (Choose three.)
Selected Answer 8-Port Gigabit Ethernet SFP XPIM 1-Port Gigabit Ethernet Small Form-Factor Pluggable (SFP) 1-Port Gigabit Ethernet PoE Correct 1-Port Gigabit Ethernet Small Form-Factor Pluggable (SFP) DOCSIS Serial Which two SRX Series devices support PoE? (Choose two.) Selected Answer SRX650 SRX340 Correct SRX650 SRX340 Which two of the following does a default configuration on an SRX300 include? (Choose two.) Selected Answer an untrust security zone a default gateway Correct an untrust security zone a DHCP client on ge-0/0/0 What match criteria does an SRX Series device’s network processing unit (NPU) use to determine if a flow already exists for a packet? (Choose three.) Selected Answer source port MAC address protocol Correct source port unique session token number for a given zone and virtual router protocol The vSRX is available for which two of the following hypervisors? (Choose two.) Selected Answer Hyper-V KVM Correct Hyper-V KVM When traffic has met match criteria, what options are available to be performed on the traffic? (Choose three.) Selected Answer permit discard redirect Correct deny permit reject After a packet is not able to be matched to an existing session, what is the next service to inspect the packet? Selected Answer zones Correct screens In the context of SRX Series devices, what services does fast-path processing skip? (Choose two.) Selected Answer services ALG policy Correct policy zones Which is the correct syntax representation of a wildcard address for an address book entry? Selected Answer 192.168.0.7/ 00000000.00000000.00000001.11111111 Correct 192.168.0.7/255.255.0.255 What security component is a collection of one of more network segments sharing identical security requirements? Selected Answer policy Correct zone What are two security policy components? (Choose two.) Selected Answer user-defined address object application Correct user-defined address object application Which two statements are true regarding unified security policies? (Choose two.) Selected Answer A unified policy can be a zone-based policy. A unified policy cannot be a global-based policy. Correct A unified policy can be a global-based policy. A unified policy can be a zone-based policy. What is a set of rules that tells a Junos security device how to treat transit traffic? Selected Answer filter Correct policy Which order do Junos security devices examine policies for transit traffic? Selected Answer default policy, global policies, zone policies Correct zone policies, global policies, default policy Which two criteria are correct when considering security policy rule ordering? (Choose two.) Selected Answer By default, new rules go to the end of the list. Rules with more specific match criteria should be listed higher. Correct By default, new rules go to the end of the list. Rules with more specific match criteria should be listed higher. Which two statements describe the GeoIP feature of Sky ATP? (Choose two.) Selected Answer The SRX Series device needs connectivity with the Sky ATP cloud for GeoIP to function properly. GeoIP uses dynamic address entries. Correct The SRX Series device needs connectivity with the Sky ATP cloud for GeoIP to function properly. GeoIP uses dynamic address entries. Which two statements describe the C&C threat prevention feature of Sky ATP? (Choose two.) Selected Answer C&C threat prevention stops the users in your network from downloading malicious software from webservers. C&C threat prevention stops users in your network from downloading malicious software from an e- mail server. Correct C&C threat prevention can stop hosts in your network from unwillingly participating in a DDoS attack. C&C threat prevention stops compromised hosts in your network from communicating with known C&C servers. Which two statements are true about Sky ATP e-mail protection? (Choose two.) Selected Answer Sky ATP e-mail protection inspects POP3 traffic. Sky ATP e-mail protection inspects SMTP traffic. Correct Sky ATP e-mail protection inspects SMTP traffic. Sky ATP e-mail protection inspects IMAP traffic. If you need to protect against malicious files that might be download through Web-based e-mail, which Sky ATP protection mechanism should you use? Selected Answer SMTP file inspection Correct HTTP file inspection Which statement is correct about interface-based NAT? Selected Answer Interface-based NAT uses the outbound interface IP address to translate the source address of outgoing packets. Correct Interface-based NAT uses the outbound interface IP address to translate the source address of outgoing packets. When does a Junos security device implement NAT? Selected Answer fast path processing only Correct both first path and fast path processing Bidirectional initiation of translation is classified as which type of NAT? Selected Answer dynamic Correct static What are two types of source NAT? (Choose two.) Selected Answer policy-based interface-based Correct pool-based interface-based In the J-Web user interface, which feature is used to facilitate building IPsec VPN tunnels? Selected Answer the VPN Wizard Correct the VPN Wizard You are configuring an SRX Series device to inter-operate with a third-party IPsec VPN endpoint that uses policies to create the VPN. In this scenario, what must be configured for the VPN to work? Selected Answer proxy IDs Correct proxy IDs When considering secure VPNs, what are three major security concerns? (Choose three.) Selected Answer integrity confidentiality reliability Correct integrity confidentiality source authentication Hashed Message Authentication Code (HMAC) is a source authentication method based on which three procedures? (Choose three.) Selected Answer adds a pre-shared key (PSK) to the hashing process validates data integrity and verifies that the data came from the proper source adds a certificate to the hashing process Correct pre-shared key must be known by both sides adds a pre-shared key (PSK) to the hashing process validates data integrity and verifies that the data came from the proper source What is the correct order for processing UTM traffic within the Junos flow module services? Selected Answer interface I/O, security policy, application proxy, TCP proxy Correct interface I/O, security policy, TCP proxy, application proxy A security administrator wants to deploy application control policies to allow or deny traffic based on dynamic applications in the organization's Amazon Web Services (AWS) deployment. Which action would accomplish this task? Selected Answer Deploy a vSRX in AWS and configure a new security policy with the respective IP address and port numbers. Correct Deploy a vSRX with the AppSecure suite in AWS and configure the AppFW. Which statement is correct about the antivirus feature on SRX Series devices? Selected Answer The full file-based antivirus feature allows you to create local whitelists and blacklists. Correct The Sophos antivirus feature is less CPU intensive than the full file-based antivirus feature. Which three features are does Unified Threat Management (UTM) include? (Choose three.) Selected Answer IDP/IPS content filtering screen filtration Correct antivirus content filtering antispam You are installing a Junos Space Log Collector VM for a large-scale deployment. What are two valid node types for this deployment? (Choose two.) Selected Answer Log Receiver node Chassis Cluster node Correct Log Receiver node Log Storage node You have downloaded the package “junos-srxme-19.1R1.6-domestic.tgz”. Based on the naming convention, which two things are true about this release? (Choose two.) Selected Answer It is a standard release. It supports strong encryption. Correct It is a standard release. It supports strong encryption. Prior to creating reports by the routing engines, what must be enabled on an SRX Series device? Selected Answer packet capture Correct security logging On an SRX Series device, which two troubleshooting utilities are available within the J-Web interface? (Choose two.) Selected Answer Traceroute Ping Host Correct Traceroute Ping Host