Juniper JNCIA JN0-541 Questions & Answers

• Question 11:

  Which context value do you filter on to identify all webservers in a network?

  A. HTTP Request Method

  B. HTTP Server IP

  C. HTTP Header Server

  D. HTTP Header User Agent

  Correct Answer: C

• Question 12:

  Exhibit:

  You work as an administrator at Certkiller .com. Study the exhibit carefully. In the mode shown in the exhibit, IDP Sensor can protect Server A against attacks being initiated from which three hosts? (Choose three.)

  Exhibit:

  

  A. Attacker

  B. Server B

  C. Client B

  D. Client A

  Correct Answer: ACD

• Question 13:

  Which two tasks can be performed from the IDP ACM? (Choose two.)

  A. change the One-Time Password for IDP Management Server communication

  B. enable or disable SSH Access, and restrict which networks can SSH to the IDP

  C. disable a Security Policy

  D. disable Layer 2 Attack Detection

  Correct Answer: AB

• Question 14:

  Which method of detection does IDP Sensor use to detect a known buffer overflow against a specific server?

  A. Backdoor Detection

  B. Protocol Anomaly

  C. NetworkHoneypot

  D. Stateful Signatures

  Correct Answer: B

• Question 15:

  Which filters can be applied to reports?

  A. Source IP/Port, Destination IP Port, Protocol, Attack, Time

  B. Filters cannot be applied to reports.

  C. any field in the Log Viewer

  D. Source IP, Destination IP and Port, Protocol, Attack, Time

  Correct Answer: C

• Question 16:

  Which method of detection does IDP Sensor use to detect an invalid IP address entering an external interface?

  A. Layer2 Detection

  B. DOS Detection

  C. Spoofing Detection

  D. Backdoor Detection

  Correct Answer: C

• Question 17:

  Which two actions can be taken on a rule when deployed in Sniffer mode? (Choose two.)

  A. drop packet

  B. ignore

  C. drop connection

  D. close server and client

  Correct Answer: BD

• Question 18:

  What is a Close Server action?

  A. drops all packets from the attacker's IP

  B. drops any packet matching thissrc/dst/protocol

  C. drops only the specific packet matching the attack pattern

  D. issues a TCP Reset to the server only

  Correct Answer: D

• Question 19:

  What must you do to view the data captured by ESP?

  A. You must start ESP.

  B. You must enable ESP logging in the Security Policy.

  C. ESP cannot alert you of abnormal activity.

  D. You must choose a Profiler action to synchronize data from the desired IDP Sensor.

  Correct Answer: D

• Question 20:

  Which three types of charts can be used in reports? (Choose three.)

  A. vertical bar chart

  B. line chart

  C. pie chart

  D. histogram

  Correct Answer: ABC