Juniper JNCIA JN0-541 Questions & Answers

• Question 1:

  What are three configuration options for ESP? (Choose three.)

  A. Network Interfaces

  B. Profiles

  C. Tracked Hosts

  D. Exclusions

  Correct Answer: BCD

• Question 2:

  Which command is used to verify the license installed on the IDP Sensor?

  A. scio lic list

  B. sctop lic list

  C. sctop -l

  D. get license

  Correct Answer: A

• Question 3:

  What two statements are true about the Attack Object update process? (Choose two.)

  A. The Attack Update must be manually downloaded by the administrator from the Juniper site and installed on each IDP S ensor.

  B. The administrator is given the choice of which Dynamic Groups to update.

  C. Attacks objects are downloaded from the Juniper site over TCP/443 (SSL) from the IDP User Interface.

  D. A list of new, updated and removed attacks objects are displayed to the administrator.

  Correct Answer: CD

• Question 4:

  Which two statements are true about the packet data in Log Viewer? (Choose two.)

  A. Packet data can only be viewed from the Log Viewer using internal packet viewer.

  B. Packet data can be viewed from an external and internal packet viewer.

  C. Packet data captured cannot be disabled per rule.

  D. Packet data can be captured by rules in the MainRulebase.

  Correct Answer: BD

• Question 5:

  You have an event in the Log Viewer you do not want to see. What should you do?

  A. right-click on the event, select Filter - This Value

  B. select the log entries you do not want to see and delete them

  C. right-click on that event, select Filter - Not this Value

  D. create a custom Log Viewer view excluding that event

  Correct Answer: C

• Question 6:

  Which two statements are true about Violation Objects? (Choose two.)

  A. Violation Objects are used even if Profiler is not enabled.

  B. A Violation Object isan accept only rulebase.

  C. Violation Objects can help you identify activity in your network that does not meet the Corporate Security Policy.

  D. Any traffic that matches the Violation Object is flagged as a violation.

  Correct Answer: BC

• Question 7:

  What should you do to view the attack and policy that triggered a specific Log Event?

  A. sort through all fields of that log entry, and sort for the policy name and ID

  B. right-click on that event, choose Show - Attack

  C. right-click on that event, select Show - Attack in Security Policy

  D. right-click on that event, choose Show - Security Policy

  Correct Answer: C

• Question 8:

  How much RAM is recommended for the IDP Management Server?

  A. 512 MB

  B. 128 MB

  C. 256 MB

  D. 1024 MB

  Correct Answer: D

• Question 9:

  Log Investigator identified 26 attacks from a specific source to a specific destination. How can you view the details of these 26 attacks?

  A. go to the Log Viewer and filter that specific source and destination address

  B. right-click on the 26 value, select View by Key

  C. go to the Log Investigator and filter that specific source and destination address

  D. right-click on the 26 value, select View in Log Viewer

  Correct Answer: D

• Question 10:

  Which three statements are true about exporting logs? (Choose three.)

  A. Logs can be exported to XML, CSV, SNMP,SMTP, Syslog or PostgreSQL database from the CLI of the Management Server.

  B. Logs can be exported to PDF or PostScript from the IDP User Interface.

  C. Logs can be printed from the IDP User Interface.

  D. Logs can be exported to HTML format.

  Correct Answer: ABC