EMT Practice Test

1. Question Content...

---

Question1: Which statements is correct about SKY ATP?

Question2: What is the definition of zone on an SRX series devices?

Question3: Which two notifications are available when the antivirus engine detects and infected file? (Choose two.)

Question4: You configure and applied several global policies and some of the policies have overlapping match criteria.

Question5: When configuring IPsec VPNs, setting a hash algorithm solves which security concern?

Question6: What is the behavior of an SRX series device when UDP and TCP is rejected by a security policy actions?
(choose two)

Question7: Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)

Question8: Which two actions are performed on an incoming packet matching an existing session? (Choose two.)

Question9: Which flow module components handles processing for UTM?

Question10: Which statements about NAT are correct? (Choose two.)

Question11: Which statements is correct about Junos security zones?

Question12: Users on the network are restricted from accessing Facebook, however, a recent examination of the logs show that users are accessing Facebook.
Referring to the exhibit,

Why is this problem happening?

Question13: Which two statements are true about security policy actions? (Choose two.)

Question14: A new SRX Series device has been delivered to your location. The device has the factory-default configuration loaded. You have powered on the device and connected to the console port.
What would you use to log into the device to begin the initial configuration?

Question15: The Sky ATP premium or basic-Threat Feed license is needed fort which two features? (Choose two.)

Question16: What should you configure if you want to translate private source IP address to a single public IP address?

Question17: Firewall filters define which type of security?

Question18: On an SRX Series device, how should you configure your IKE gateway if the remote endpoint is a branch office using a dynamic IP address?

Question19: Which two statements are correct about functional zones? (Choose two.)

Question20: Referring to the exhibit.
****Exhibit is Missing****
Which type of NAT is performed by the SRX Series device?

Question21: Which two feature on the SRX Series device are common across all Junos devices? (Choose two.)

Question22: A new SRX Series device has been delivered to your location. The device has the factory-default configuration loaded. You have powered on the device and connected to the console port.
What would you use to log into the device to begin the initial configuration?

Question23: Which two statements are true about security policies in the factory-default configuration of an SRX340?
(Choose two.)

Question24: Click the Exhibit button.

Referring to the exhibit, which type of NAT is being performed?

Question25: You are configuring an IPsec VPN tunnel between two location onyour network. Each packet must be encrypted and authenticated.
Which protocol would satisfy these requirements?

Question26: Which UTM feature uses MIME pattern filters to identify traffic in HTTP and e-mail protocols?

Question27: You are configuring an IPsec VPN tunnel between two location on your network. Each packet must be encrypted and authenticated.
Which protocol would satisfy these requirements?

Question28: Users should not have access to Facebook, however, a recent examination of the logs security show that users are accessing Facebook.
Referring to the exhibit,

what should you do to solve this problem?

Question29: Which statements about NAT are correct? (Choose two.)

Question30: Click the Exhibit button.

You have configured source NAT using an address pool as shown in the exhibit. Traffic is reaching the
203.0.113.6 server but return traffic is not being received by the SRX Series device.
Which feature must be configured to allow return traffic to be accepted by the SRX Series device?

Question31: You want to integrate an SRX Series device with SKY ATP.
What is the first action to accomplish task?

Question32: You want to integrate an SRX Series device with SKY ATP.
What is the first action to accomplish task?

Question33: Which two segments describes IPsec VPNs? (Choose two.)

Question34: Users should not have access to Facebook, however, a recent examination of the logs security show that users are accessing Facebook.
Referring to the exhibit,

what should you do to solve this problem?

Question35: You have configured a Web filtering UTM policy?
Which action must be performed before the Web filtering UTM policy takes effect?

Question36: You verify that the SSH service is configured correctly on your SRX Series device, yet administrators attempting to connect through a revenue port are not able to connect.
In this scenario, what must be configured to solve this problem?

Question37: On an SRX Series device, how should you configure your IKE gateway if the remote endpoint is a branch office-using a dynamic IP address?

Question38: Which actions would be applied for the pre-ID default policy unified policies?

Question39: Exhibit.

Which two statements are true? (Choose two.)

Question40: Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)

Question41: Which two private cloud solution support vSRX devices? (Choose two.)

Question42: Which two feature on the SRX Series device are common across all Junos devices? (Choose two.)

Question43: Which UTM feature should you use to protect users from visiting certain blacklisted websites?

Question44: Which statement describes stateless firewalls on SRX Series devices?

Question45: What are two characteristic of static NAT SRX Series devices? (Choose two.)

Question46: Which statements is correct about SKY ATP?

Question47: What is the definition of a zone on an SRX Series device?

Question48: Which two statements are true regarding zone-based security policies? (Choose two.)

Question49: What is the correct order of processing when configuring NAT rules and security policies?

Question50: Exhibit.

Which two statements are true? (Choose two.)

Question51: Click the Exhibit button.

Users should not have access to Facebook, however, a recent examination of the security logs show that users are accessing Facebook.
Referring to the exhibit, what should you do to solve this problem?

Question52: Which statements describes stateless firewalls on SRX series devices?

Question53: What should you configure if you want to translate private source IP addresses to a single public IP address?

Question54: The free licensing model for Sky ATP includes which features? (Choose two.)

Question55: You are designing a new security policy on an SRX Series device. You must block an application and log all occurrence of the application access attempts.
In this scenario, which two actions must be enabled in the security policy? (Choose two.)

Question56: Which two statements are true about UTM on an SRX340? (Choose two.)

Question57: What is the correct order of processing when configuring NAT rules and security policies?

Question58: Which security feature is applied to traffic on an SRX Series device when the device is running n packet mode?

Question59: Which three actions would be performed on traffic traversing an IPsec VPAN? (Choose three.)

Question60: You are asked to run a report to find the top talkers on your network in the past 48 hours.
In this scenario, the report will be in which format when the J-Web UI delivers it to you?

Question61: On an SRX device, you want to regulate traffic base on network segments.
In this scenario, what do you configure to accomplish this task?

Question62: BY default, revenue interface are placed into which system-defined security zone on an SRX series device?