EMT Practice Test

1. Question Content...

---

Question1: Which two statements describe how rules are used with Juniper Secure Analytics? (Choose two.)

Question2: In an Active/Active chassis cluster deployment, which chassis cluster component is responsible for RG0 traffic?

Question3: You are deploying the Junos application firewall feature in your network.
In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)

Question4: You are asked to convert two standalone SRX Series devices to a chassis cluster deployment. You must ensure that your IPsec tunnels will be compatibla with the new deployment.
In this scenario, which two interfaces should be used when binding your tunnel endpoints? (Choose two.)

Question5: Which two statements about JIMS high availability are true? (Choose two.)

Question6: Click the Exhibit button.

Referring to the exhibit, which statement is true?

Question7: Which security log message format reduces the consumption of CPU and storage?

Question8: The AppQoE module of AppSecure provides which function?

Question9: Which two statements are correct about server-protection SSP proxy? (Choose two.)

Question10: When working with network events on a Juniper Secure Analytics device, flow records come from which source?

Question11: What are two types of attack objects used by IPS on SRX Series devices? (Choose two.)

Question12: You are using the JIMS Administrator user interface to add multiple SRX client devices. You must share common configuration attributes across the SRX clients without having to re-enter those attributes for each SRX client instance.
Which JIMS Administrator feature would be used to accomplish this task?

Question13: Click the Exhibit button.

You have deployed Sky ATP to protect your network from attacks so that users are unable to download malicious files. However, after a user attempts to download a malicious file, they are still able to communicate through the SRX Series device.
Referring to the exhibit, which statement is correct?

Question14: You want to use Sky ATP to protect your network; however, company policy does not allow you to send any files to the cloud.
Which Sky ATP feature should you use in this situation?

Question15: Which three statements are correct about fabric interfaces on the SRX5800? (Choose three.)

Question16: Which two statements are true about virtualized SRX Series devices? (Choose two.)

Question17: Click the Exhibit button.

Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer.
To complete this task, where should you configure the default gateway for the User-1 device?

Question18: What are two management methods for cSRX? (Choose two.)

Question19: What are two examples of RTOs? (Choose two.)

Question20: Click the Exhibit button.

Which two statements describe the output shown in the exhibit? (Choose two.)

Question21: What is the default timeout period for a TCP session in the session table of a Junos security device?

Question22: Click the Exhibit button.

Referring to the SRX Series flow module diagram shown in the exhibit, where is IDP/IPS processed?

Question23: You are troubleshooting advanced policy-based routing (APBR).
Which two actions should you perform in this scenario? (Choose two.)

Question24: Which three statements are true about the difference between cSRX-based virtual security deployments and vSRX-based virtual security deployments? (Choose three.)

Question25: Which two statements describe JSA? (Choose two.)

Question26: Click the Exhibit button.

You are configuring an SRX chassis cluster with the node-specific hostname and management address. Referring to the exhibit, which configuration completes this requirement?
A)

B)

C)

D)

Question27: You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone.
In this scenario, which statement is true?

Question28: Click the Exhibit button.

Referring to the exhibit, which two devices are considered to be part of the secure fabric site with Policy Enforcer? (Choose two.)

Question29: You must fine tune an IPS security policy to eliminate false positives. You want to create exemptions to the normal traffic examination for specific traffic.
Which two parameters are required to accomplish this task? (Choose two.)

Question30: What is the maximum number of supported interfaces on a vSRX hosted in a VMware environment?

Question31: When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)

Question32: When considering managed sessions, which configuration parameter determines how full the session table must be to implement the early age-out function? (Choose two)