Juniper Juniper Certifications JN0-541 Questions & Answers

• Question 141:

  Exhibit:

  

  You work as an administrator at Certkiller .com. Study the exhibit carefully. In the exhibit, which rule base would have generated the log message?

  A. traffic anomaly

  B. networkhoneypot

  C. backdoor

  D. SYN protector

  Correct Answer: A

• Question 142:

  Within the SYN protector rule base, what is the function of relay action?

  A. It will create a session with the server only if the client completes the three-step TCP handshake with the sensor.

  B. It will not monitor incoming SYN requests.

  C. It will relay all SYN connections to a fake IP.

  D. It will monitor new connections to a protected server, but not prevent them.

  Correct Answer: A

• Question 143:

  Which interface does IDP use to communicate with Security Manager?

  A. eth0

  B. console port

  C. eth1 D. HA port

  Correct Answer: A

• Question 144:

  You implement backdoor detection and you notice that an alert is generated each time an SSH session is established with the protected servers. What must you do to correct the situation?

  A. You create an exempt rule for SSH in the exempt rule base.

  B. There is no way to disable alerting on SSH if you have backdoor detection enabled.

  C. You modify the IDP rule base to include the SSH protocol in the top rule, and specify action Ignore.

  D. You modify the backdoor rule base to include the SSH protocol in the top rule, and specify action Ignore.

  Correct Answer: D

• Question 145:

  When the action "close client" is performed by an IDP sensor on an FTP session, which message will be displayed to the client when using FTP on the command line?

  A. no message is seen, the connection is unresponsive

  B. packet dropped

  C. connection closed by foreign host

  D. no message is seen, the connection continues as normal

  Correct Answer: C

• Question 146:

  Which two tasks can be performed using the ACM? (Choose two.)

  A. Disable a security a policy.

  B. View a list of current TCP flows.

  C. Change the One-Time Password.

  D. Enable or disable SSH access, and restrict which networks can SSH to the sensor.

  Correct Answer: CD

• Question 147:

  What is the function of a dynamic attack object group?

  A. To create a custom grouping of attack objectswhich will be automatically updated during an attack database update

  B. To create a custom grouping of attack objects that will not be modified during an attack object database update.

  C. To allow an administrator to group together user-defined attack objects only.

  D. To allow Juniper engineers to specify a particular group of attack objects.

  Correct Answer: A

• Question 148:

  Exhibit:

  

  Given the information in the exhibit

  What is the proper order when fine tuning a policy?

  A. d, a, b, c

  B. d, c, a, b

  C. d, a, c, b

  D. b, d, a, c

  Correct Answer: C

• Question 149:

  Which three functions does the IDP sensor perform? (Choose three.)

  A. detects new hosts on the network

  B. forwards logs and status messages to Security Managerserver

  C. displays logs in Security Manager GUI

  D. performs attack detection and prevention

  Correct Answer: ABD

• Question 150:

  What does the action "close client" instruct the sensor to do?

  A. Send a TCP reset to the client and server.

  B. Send a UDP reset to the client.

  C. Drop all packets from the client's IP address.

  D. Send a TCP reset to the client.

  Correct Answer: D