Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC)

1.

Regarding fast path processing, when does the system perform the policy check?

The policy is determined after the SCREEN options check. The policy is determined only during the first packet path, not during fast path. The policy is determined after the zone check. The policy is determined after the SYN TCP flag.

2.

Which URL database do branch SRX Series devices use when leveraging local Web filtering?

The SRX Series device will download the database from an online repository to locally inspect HTTP traffic for Web filtering. The SRX Series device will use an offline database to locally inspect HTTP traffic for Web filtering. The SRX Series device will redirect local HTTP traffic to an external Websense server for Web filtering. The SRX Series administrator will define the URLs and their associated action in the local database to inspect the HTTP traffic for Web filtering.

3.

Which command do you use to manually remove antivirus patterns?

request security utm anti-virus juniper-express-engine pattern-delete request security utm anti-virus juniper-express-engine pattern-reload request security utm anti-virus juniper-express-engine pattern-remove delete security utm anti-virus juniper-express-engine antivirus-pattern

4.

Which CLI command do you use to block MIME content at the [edit security utm feature-profile] hierarchy?

set content-filtering profile permit-command block-mime set content-filtering profile block-mime set content-filtering block-content-type block-mime set content-filtering notifications block-mime

5.

By default, how is traffic evaluated when the antivirus database update is in progress?

Traffic is scanned against the old database. Traffic is scanned against the existing portion of the currently downloaded database. All traffic that requires antivirus inspection is dropped and a log message generated displaying the traffic endpoints. All traffic that requires antivirus inspection is forwarded with no antivirus inspection and a log message generated displaying the traffic endpoints.

6.

Which statement is true regarding IPsec VPNs?

There are five phases of IKE negotiation. There are two phases of IKE negotiation. IPsec VPN tunnels are not supported on SRX Series devices. IPsec VPNs require a tunnel PIC in SRX Series devices.

7.

A user wants to establish an FTP session to a server behind an SRX device but must authenticate to a Web page on the SRX device for additional authentication. Which type of user authentication is configured?

pass-through WebAuth WebAuth with Web redirect pass-through with Web redirect

8.

What is the functionality of redundant interfaces (reth) in a chassis cluster?

reth interfaces are used only for VRRP. reth interfaces are the same as physical interfaces. reth interfaces are pseudo-interfaces that are considered the parent interface for two physical interfaces. Each cluster member has a reth interface that can be used to share session state information with the other cluster members.

9.

When an SRX series device receives an ESP packet, what happens?

If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, it will immediately decrypt the packet. If the destination IP address in the outer IP header of ESP does not match the IP address of the ingress interface, it will discard the packet. If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, based on SPI match, it will decrypt the packet. If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, based on SPI match and route lookup ofinner header, it will decrypt the packet.

10.

What is the maximum number of layers of decompression that juniper-express-engine (express AV) can decompress for the HTTP protocol?

1 4 8

Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC)

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Juniper Networks Certified Internet Specialist, SEC (JNCIS-SEC)

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner