Juniper Juniper Certifications JN0-541 Questions & Answers

• Question 101:

  On which three fields can ESP filter data? (Choose three.)

  A. Time

  B. Service

  C. Access Type

  D. IP address (Source IP or Destination IP)

  Correct Answer: BCD

• Question 102:

  Which two does ESP use to help identify applications running on certain hosts? (Choose two.)

  A. value

  B. service

  C. context

  D. VLAN Information

  Correct Answer: AC

• Question 103:

  What is a Violation Object in ESP?

  A. any object that defines configuration of ESP

  B. any object that violates application context in ESP

  C. any object that violates the Security Policy configured in ESP

  D. any object that defines valid network connections on the network

  Correct Answer: D

  "Violation objects are objects that contain simple rules , consisting only of source IP, destination IP, service. The implied action is "permit". Use the object to define what you should see on the network - as opposed to an attack object which defines what you don't want to see" Juniper Networks Product training : Release 3.0A, May 2004 Undisclosed author, page4-20

• Question 104:

  What information is provided by the host table (Choose three.)

  A. IP address

  B. Subnet mask

  C. MAC address

  D. VLAN information

  Correct Answer: ACD

• Question 105:

  Which three statements about the ESP are true? (Choose three.)

  A. ESP can log policy violations.

  B. ESP can detect network changes.

  C. ESP can work in all deployment modes of the IDP Sensor.

  D. ESP uses an object database that is stored only on the IDP Sensor.

  Correct Answer: ABC

• Question 106:

  Log Investigator identified26 attacks from a specific source to a specific destination. How can you view the details of these 26 attacks?

  A. right-click on the 26 value, select View by Key

  B. right-click on the 26 value, select View in Log Viewer

  C. go to the Log Viewer and filter that specific source and destination address

  D. go to the Log Investigator and filter that specific source and destination address

  Correct Answer: B

• Question 107:

  Which statement is true about Packet Logging in IDP?

  A. Packet captures are stored on each IDP Sensor.

  B. Packet captures are stored on the Management Server.

  C. Packets are not cryptographicallytimestamped or authenticated.

  D. Packets are cryptographicallytimestamped and authenticated using PKI.

  Correct Answer: A

• Question 108:

  In which three fields does Log Investigator allow you to create reports and view logs? (Choose three.)

  A. Time

  B. Attack

  C. Destination Port

  D. Sensor IP Address

  Correct Answer: ABC

• Question 109:

  Which two statements are true about packet logging? (Choose two.)

  A. Packets captured are stored inpcap format.

  B. IDP senor will tag all replayed packets are offline.

  C. Packets logged can be replayed back into the IDP Sensor.

  D. Packets captured cannot be replayed back into the IDP Sensor

  Correct Answer: AC

• Question 110:

  Which two statements about disk management on the IDP Sensor are true?

  A. IDP Management Server can be configured to send disk space alerts.

  B. If the IDP Sensor disk is full, the IDP Sensor will not store any additional logs or packet captures.

  C. If the IDP Sensor disk is full IDPSensore starts oldest log entries first, and packet captures second.

  D. If the IDP Management Server disk is full, the oldest packet captures are purged first, and the log messages are purged second.

  Correct Answer: AD