Juniper Juniper Certifications JN0-541 Questions & Answers

• Question 201:

  In Enterprise Security Profiler (ESP), what is a permitted object?

  A. Any object that violates the security policy configured in ESP.

  B. Any object that defines valid network connections on the network.

  C. Any object that violates application context.

  D. Any object that defines the configuration of ESP.

  Correct Answer: B

• Question 202:

  Which three columns can be seen in the Application View of the Enterprise Security Profiler? (Choose three.)

  A. Service

  B. Src OS Name

  C. Src and Dest IPs

  D. Context

  E. Access Type

  Correct Answer: BCD

• Question 203:

  Which sensor process handles all communication between the sensor and Security Manager?

  A. agent

  B. idp

  C. sciod

  D. profiler

  Correct Answer: A

• Question 204:

  Which three statements are true as they relate to a transparent mode IDP deployment? (Choose three.)

  A. Can actively prevent attacks on all traffic.

  B. Can be installed in the network without changing IP addresses or routes.

  C. Uses paired ports, such that packets arriving on one port go out the other associated port.

  D. An IP address must be defined on each forwarding interface.

  Correct Answer: ABC

• Question 205:

  What is "a unique pattern that always exists within an attack"?

  A. attack severity

  B. attack signature

  C. context

  D. protocol anomaly

  Correct Answer: B

• Question 206:

  Which sensor command can be used to determine if profiler data is being sent to Security Manager?

  A. scio getsystem

  B. sctop "s" option

  C. scio agentconfig list

  D. scio agentstats display

  Correct Answer: D

• Question 207:

  Exhibit:

  

  You work as an administrator at Certkiller .com. Study the exhibit carefully. In the exhibit, which rule base would have generated the log message?

  A. traffic anomaly

  B. backdoor

  C. networkhoneypot

  D. SYN protector

  Correct Answer: A

• Question 208:

  Which three actions must be taken prior to deploying an IDP sensor (in transparent mode) in a network?

  A. Assign an IP to the management interface IP.

  B. Establish communication between Security manager and the sensor.

  C. Assign an IP to all forwarding interfaces.

  D. Configure the sensor mode.

  Correct Answer: ABD

• Question 209:

  If an IDP sensor finds that a packet matchesa particular IDP rule, and then finds a matching exempt rule, what does the sensor do?

  A. Does not create a log entry, does not perform the action in the matching rule, and then examines the next IDP rule in the list.

  B. Creates a log entry for the matching rule, performs the action in the IDP rule, and then examines the next IDP rule in the list.

  C. Creates a log entry for the matching rule, does not perform the action in the IDP rule, and then examines the next IDP rule in the list.

  D. Does not create a log entry or perform the action in the matching rule, and then stops examining the remainder of the IDP rules for that particular packet.

  Correct Answer: A

• Question 210:

  Which two statements are true as they relate to a sniffer mode IDP sensor deployment? (Choose two.)

  A. IDP sensor cannot be managed by Security Manager in sniffer mode.IDP sensor cannot be managed by Security Manager in sniffer mode.

  B. It provides passive monitoring only with limited attack prevention.

  C. An IP address must be assigned to the sniffer interface.

  D. It does not affect the performance or availability of the network.

  Correct Answer: BD