Juniper Juniper Certifications JN0-541 Questions & Answers

• Question 191:

  What is one use of an IP action?

  A. It modifies the IP header to prevent the attack.

  B. It blocks subsequent connections from specific IP addresses.

  C. It permits or denies the traffic, based on the IP header.

  D. It modifies the IP header to redirect the attack.

  Correct Answer: B

• Question 192:

  Which three fields in a packet must match an IDP rule before that packet is examined for an attack? (Choose three.)

  A. destination address

  B. service

  C. terminate match

  D. source address

  E. attack object

  Correct Answer: ABD

• Question 193:

  In IDP Sensor clustering, which port is used to send state synchronization information to other devices in the cluster?

  A. eth2

  B. eth1

  C. eth0

  D. console port

  Correct Answer: B

• Question 194:

  Which statement is true regarding policy installation on an IDP sensor?

  A. A policy version is created when a new policy is successfully installed.

  B. Thepkid process on the sensor handles the policy installation.

  C. Thepolicy.set file is updated on the sensor.

  D. The sensor stops processing traffic when the policy is being installed.

  Correct Answer: C

• Question 195:

  Which three actions must be taken prior to deploying an IDP sensor (in transparent mode) in a network?

  A. Assign an IP to all forwarding interfaces.

  B. Establish communication between Security manager and the sensor.

  C. Assign an IP to the management interface IP.

  D. Configure the sensor mode.

  Correct Answer: BCD

• Question 196:

  Which command will display the mode of the IDP sensor?

  A. sctop "m" option

  B. scio agentconfig list

  C. scio getsystem

  D. scio agentstats display

  Correct Answer: C

• Question 197:

  Which two statements are true regarding static and dynamic attack object groups? (Choose two.)

  A. Attack objects in a dynamic group can be added or updated during the attack object database update process.

  B. You create a dynamic attack object group by specifying particular filters to apply to the attack object database, such as severity, product, and service.

  C. The critical attack object group is a static group.

  D. Dynamic groups require that an administrator manually add new attack objects after an attack database update.

  Correct Answer: AB

• Question 198:

  You want Enterprise Security Profiler (ESP) to capture layer 7 data of packets traversing the network. Which two steps must you perform? (Choose two.)

  A. Configure ESP to enable application profiling, and select the contexts to profile.

  B. Under the Violation Viewer tab, create a permitted object, select that object, and then click Apply.

  C. Start or restart the profiler process.

  D. Create a filter in the ESP to show only tracked hosts.

  Correct Answer: AC

• Question 199:

  You can remotely administer the IDP sensor using which two methods? (Choose two.)

  A. theWebUI ACM over HTTPS

  B. theWebUI ACM over HTTP

  C. an SSH connection

  D. a telnet connection

  Correct Answer: AC

• Question 200:

  Given the following steps:

  a.

  Attach the sensor to the management network.

  b.

  Place the sensor inline in network.

  c.

  Create and install a policy on the sensor.

  d.

  Establish communication between Security Manager and the IDP sensor.

  e.

  Configure the sensor deployment mode and management interface IP.

  f.

  Test connectivity through the sensor.

  Which order is correct when initially deploying a sensor in a network?

  A. b, f, e, a, d, c

  B. e, a, d, c, b, f

  C. e, a, d, b, f, c

  D. a, e, d, c, f, b

  Correct Answer: C