Juniper JNCIA JN0-541 Questions & Answers

• Question 41:

  How can you see a "view all ESP events" for Violation Objects?

  A. You must define a custom filter to view only Violation Objects.

  B. You select Violation Objects in the Log Viewer screen.

  C. You select the Violation view in the Profiler.

  D. Violation Objects are not used in ESP.

  Correct Answer: C

• Question 42:

  How can you create a quick report?

  A. right-click on an entry in the Log Investigator

  B. right-click on a predefined report

  C. right-click on an entry in the Log Viewer

  D. Quick reports are available in the Dashboard only.

  Correct Answer: C

• Question 43:

  Which statement is true about exporting a Security Policy?

  A. The appearance of the formatting can be changed.

  B. The Security Policy can be exported to PDF from the IDP User Interface.

  C. The Security Policy can only be printed.

  D. The Security Policy can be exported to HTML from the IDP User Interface.

  Correct Answer: B

• Question 44:

  Which three Profiler tables does ESP use to store data? (Choose three.)

  A. Value

  B. User

  C. Peer

  D. Host

  Correct Answer: ACD

• Question 45:

  Which three statements are true about ESP? (Choose three.)

  A. ESP indicates when new hosts or protocols are being used.

  B. ESP provides a summary of protocols and contexts on each host.

  C. ESP indicates when a specific machine has been attacked.

  D. ESP indicates which hosts are talking with each other, and which protocols are being used.

  Correct Answer: ABD

• Question 46:

  What should you do to build effective security policies?

  A. create specific rules for critical servers first, which look for attacks that are relevant to those servers (such as HTTP attacks onWebservers); DO NOT make these rules Terminate Match

  B. create specific rules for critical servers first, which look for attacks that are relevant to those servers (such as HTTP attacks onWebservers); make these rules Terminate Match

  C. create an Any/Any rule to look for all attacks and make this rule#1; DO NOT select Terminate Match

  D. create an Any/Any rule to look for all attacks and make this rule#1; select Terminate Match

  Correct Answer: B

• Question 47:

  You can remotely administer the IDP Sensor through _____. (Choose two.)

  A. theWebUI ACM over HTTPS

  B. theWebUI ACM over HTTP

  C. a Telnet Console

  D. an SSH Console

  Correct Answer: AD

• Question 48:

  When migrating from Sniffer mode to Inline mode, what three changes need to be made so that the IDP can effectively prevent attacks? (Choose three.)

  A. reconnect the IDP Sensors forwarding interfaces appropriately

  B. from the ACM, change the IDP Sensor mode from Sniffer to Inline

  C. reconfigure management interface IP

  D. modify the rule action to drop or close

  Correct Answer: ABD

• Question 49:

  Which three are Predefined reports? (Choose three.)

  A. Top Rules

  B. Top Attacks

  C. Attacks by User

  D. Attacks over Time

  Correct Answer: ABD

• Question 50:

  What best describes Reconnaissance attacks?

  A. disabling or corrupting networks, systems, or services with the intent to deny the service to intended users

  B. transmission of ping packets of certain size to crash a remote host

  C. unauthorized discovery and mapping of systems, services, or vulnerabilities

  D. transmission of TCP SYN requests from a spoofed IP address

  Correct Answer: C