Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC) Set 1

1.

Which configuration keyword ensures that all in-progress sessions are re-evaluated upon committing a security policy change?

policy-rematch policy-evaluate rematch-policy evaluate-policy

2.

Which UTM feature requires a license to function?

integrated Web filtering local Web filtering redirect Web filtering content filtering

3.

A network administrator has configured source NAT, translating to an address that is on a locally connected subnet. The administrator sees the translation working, but traffic does not appear to come back. What is causing the problem?

The host needs to open the telnet port. The host needs a route for the translated address. The administrator must use a proxy-arp policy for the translated address. The administrator must use a security policy, which will allow communication between the zones.

4.

Which statement describes an ALG?

An ALG intercepts and analyzes all traffic, allocates resources, and defines dynamic policies to deny the traffic. An ALG intercepts and analyzes the specified traffic, allocates resources, and defines dynamic policies to permit the traffic to pass. An ALG intercepts and analyzes the specified traffic, allocates resources, and defines dynamic policies to deny the traffic. An ALG intercepts and analyzes all traffic, allocates resources, and defines dynamic policies to permit the traffic to pass.

5.

What is the correct syntax for applying node-specific parameters to each node in a chassis cluster?

set apply-groups node$ set apply-groups (node) set apply-groups $(node) set apply-groups (node)all

6.

Which statement describes a security zone?

A security zone can contain one or more interfaces. A security zone can contain interfaces in multiple routing instances. A security zone must contain two or more interfaces. A security zone must contain bridge groups.

7.

What is the default session timeout for TCP sessions?

1 minute 15 minutes 30 minutes 90 minutes

8.

The SRX device receives a packet and determines that it does not match an existing session.After SCREEN options are evaluated, what is evaluated next?

source NAT destination NAT route lookup zone lookup

9.

Which zone type can be specified in a policy?

security functional user system

10.

Which Web-filtering technology can be used at the same time as integrated Web filtering on a single branch SRX Series device?

Websense redirect Web filtering local Web filtering (blacklist or whitelist) firewall user authentication ICAP

Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC) Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC) Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner