Juniper-SEC, Specialist (JNCIS-SEC) Set 1

1.

Regarding attacks, which statement is correct?

Both DoS and propagation attacks exploit and take control of all unprotected network devices. Propagation attacks focus on suspicious packet formation using the DoS SYN-ACK-ACK proxy flood. DoS attacks are directed at the network protection devices, while propagation attacks are directed at theservers. DoS attacks are exploits in nature, while propagation attacks use trust relationships to take control of thedevices.

2.

For IKE phase 1 negotiations, when is aggressive mode typically used?

when one of the tunnel peers has a dynamic IP address when one of the tunnel peers wants to force main mode to be used when fragmentation of the IKE packet is required between the two peers when one of the tunnel peers wants to specify a different phase 1 proposal

3.

A traditional router is better suited than a firewall device for which function?

VPN establishment packet-based forwarding stateful packet processing Network Address Translation

4.

Host A opens a Telnet connection to Host B. Host A then opens another Telnet connection to Host B. These connections are the only communication between Host A and Host B. The security policy configuration permits both connections. How many flows exist between Host A and Host B?

1 2 3 4

5.

You want to allow your device to establish OSPF adjacencies with a neighboring device connected to interface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone. Under which configuration hierarchy must you permit OSPF traffic?

[edit security policies from-zone HR to-zone HR] [edit security zones functional-zone management protocols] [edit security zones protocol-zone HR host-inbound-traffic] [edit security zones security-zone HR host-inbound-traffic protocols]

6.

An attacker sends a low rate of TCP SYN segments to hosts, hoping that at least one port replies. Which type of an attack does this scenario describe?

DoS SYN flood port scanning IP address sweep

7.

Where do you configure SCREEN options?

zones on which an attack might arrive zones you want to protect from attack interfaces on which an attack might arrive interfaces you want to protect from attack

8.

Prior to applying SCREEN options to drop traffic, you want to determine how your configuration will affect traffic. Which mechanism would you configure to achieve this objective?

the log option for the particular SCREEN option the permit option for the particular SCREEN option the SCREEN option, because it does not drop traffic by default the alarm-without-drop option for the particular SCREEN option

9.

You must configure a SCREEN option that would protect your device from a session table flood. Which configuration meets this requirement?

[edit security screen] user@hostl# show ids-option protectFromFlood { icmp { ip-sweep threshold 5000; flood threshold 2000; } } [edit security screen]user@hostl# show ids-option protectFromFlood { tcp { syn-flood { attack-threshold 2000; destination-threshold 2000; } } } [edit security screen]user@hostl# show ids-option protectFromFlood { udp { flood threshold 5000; } } [edit security screen]user@hostl# show ids-option protectFromFlood { limit-session { source-ip-based 1200; destination-ip-based 1200; } }

10.

Which parameters are valid SCREEN options for combating operating system probes?

syn-fin, syn-flood, and tcp-no-frag syn-fin, port-scan, and tcp-no-flag syn-fin, fin-no-ack, and tcp-no-frag syn-fin, syn-ack-ack-proxy, and tcp-no-frag

Juniper-SEC, Specialist (JNCIS-SEC) Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Juniper-SEC, Specialist (JNCIS-SEC) Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner