Juniper Security, Professional (JNCIP-SEC) Set 1

Question - 15 Maximum mark : - 30

Home
All Exams
Juniper Security, Professional (JNCIP-SEC) Online Mock Tests
Juniper Security, Professional (JNCIP-SEC) Set 1

What is a benefit of using a dynamic VPN?

It provides a layer of redundancy on top of a point-to-point VPN mesh architecture. ✘ It eliminates the need for point-to-point VPN tunnels. ✘ It provides a way to grant VPN access on a per-user-group basis. ✘ It simplifies IPsec access for remote clients. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

What is a benefit of using a group VPN?

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which statement is true about Layer 2 zones when implementing transparent mode security?

All interfaces in the zone must be configured with the protocol family mpls. ✘ All interfaces in the zone must be configured with the protocol family inet. ✘ All interfaces in the zone must be configured with the protocol family bridge. ✘ All interfaces in the zone must be configured with the protocol family inet6. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You are working as a security administrator and must configure a solution to protect against distributed botnet attacks on your company's central SRX cluster. How would you accomplish this goal?

Configure AppTrack to inspect and drop traffic from the malicious hosts. ✘ Configure AppQoS to block the malicious hosts. ✘ Configure AppDoS to rate limit connections from the malicious hosts. ✘ Configure AppID with a custom application to block traffic from the malicious hosts. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You are using the AppDoS feature to control against malicious bot client attacks. The bot clients are using file downloads to attack your server farm. You have configured a context value rate of 10,000 hits in 60 seconds. At which threshold will the bot clients no longer be classified as malicious?

5000 hits in 60 seconds ✘ 8000 hits in 60 seconds ✘ 7500 hits in 60 seconds ✘ 9999 hits in 60 seconds ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Referring to the following output, which command would you enter in the CLI to produce this result?
Ruleset Application Client-to-server Rate(bps) Server-to-client Rate(bps)
http-App-QoS HTTP ftp-C2S 200 ftp-C2S 200
http-App-QoS HTTP ftp-C2S 200 ftp-C2S 200
ftp-App-QoS FTP ftp-C2S 100 ftp-C2S 100

show class-of-service interface ge-2/1/0 ✘ show interface flow-statistics ge-2/1/0 ✘ show security flow statistics ✘ show class-of-service applications-traffic-control statistics rate-limiter ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You are asked to apply individual upload and download bandwidth limits to YouTube traffic. Where in the configuration would you create the necessary bandwidth limits?

under the [edit security application-firewall] hierarchy ✘ under the [edit security policies] hierarchy ✘ under the [edit class-of-service] hierarchy ✘ under the [edit firewall policer ] hierarchy ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You want to verify that all application traffic traversing your SRX device uses standard ports. For example, you need to verify that only DNS traffic runs through port 53, and no other protocols. How would you accomplish this goal?

Use an IDP policy to identify the application regardless of the port used. ✘ Use a custom ALG to detect the application regardless of the port used. ✘ Use AppTrack to detect the application regardless of the port used. ✘ Use AppID to detect the application regardless of the port used. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You have been asked to configure traffic to flow between two virtual routers (VRs) residing on two unique logical systems (LSYSs) on the same SRX5800. How would you accomplish this task?

Configure a security policy that contains the context from VR1 to VR2 to permit the relevant traffic. ✘ Configure a security policy that contains the context from LSYS1 to LSYS2 and relevant match conditions in the rule set to allow traffic between the IP networksin VR1 and VR2. ✘ Configure logical tunnel interfaces between VR1 and VR2 and security policies that allow relevant traffic between VR1 and VR2 over that link. ✘ Configure an interconnect LSYS to facilitate a connection between LSYS1 and LSYS2 and relevant policies to allow the traffic. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

Your company is providing multi-tenant security services on an SRX5800 cluster. You have been asked to create a new logical system (LSYS) for a customer. The customer must be able to access and manage new resources within their LSYS. How do you accomplish this goal?

Create the new LSYS, allocate resources, and then create the user administrator role so that the customer can manage their allocated resources. ✘ Create the new LSYS, and then create the user administrator role so that the customer can allocate and manage resources. ✘ Create the new LSYS, and then create the master adminstrator role for the LSYS so that the customer can allocate and manage resources. ✘ Create the new LSYS, then request the required resources from the customer, and create the required resources. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

Juniper Security, Professional (JNCIP-SEC) Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner