EMT Practice Test

1. Question Content...

---

Question1: Exhibit

Referring to the exhibit which statement is true?

Question2: Where is AppSecure executed in the flow process on an SRX Series device?

Question3: Which two statements are correct about SSL proxy server protection? (Choose two.)

Question4: What are three primary functions of JATP? (Choose three.)

Question5: Which security log message format reduces the consumption of CPU and storage?

Question6: Which statement describes the AppTrack module in AppSecure?

Question7: Which default protocol and port are used for JIMS to SRX client communication?

Question8: Which three statements about SRX Series device chassis clusters are true? (Choose three.)

Question9: Which two statements are correct about chassis clustering? (Choose two.)

Question10: You are asked to improve resiliency for individual redundancy groups in an SRX4600 chassis cluster.
Which two features would accomplish this task? (Choose two.)

Question11: Data plane logging operates in which two modes? (Choose two.)

Question12: Exhibit

When trying to set up a server protection SSL proxy, you receive the error shown. What are two reasons for this error? (Choose two.)

Question13: Click the Exhibit button.

Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer.
To complete this task, where should you configure the default gateway for the User-1 device?

Question14: Which two statements describe JSA? (Choose two.)

Question15: What is the maximum number of supported interfaces on a vSRX hosted in a VMware environment?

Question16: You want to manually failover the primary Routing Engine in an SRX Series high availability cluster pair.
Which step is necessary to accomplish this task?

Question17: You want to set up JSA to collect network traffic flows from network devices on your network.
Which two statements are correct when performing this task? (Choose two.)

Question18: Which two statements are correct when considering IPS rule base evaluation? (Choose two.)

Question19: What information does encrypted traffic insights (ETI) use to notify SRX Series devices about known malware sites?

Question20: Click the Exhibit button.

Referring to the exhibit, which two devices are considered to be part of the secure fabric site with Policy Enforcer? (Choose two.)

Question21: Click the Exhibit button.

You are configuring an SRX chassis cluster with the node-specific hostname and management address. Referring to the exhibit, which configuration completes this requirement?
A)

B)

C)

D)

Question22: You want to collect events and flows from third-party vendors.
Which solution should you deploy to accomplish this task?

Question23: Exhibit

You are asked to track BitTorrent traffic on your network. You need to automatically add the workstations to the High_Risk_Workstations feed and the servers to the BitTorrent_Servers feed automatically to help mitigate future threats.
Which two commands would add this functionality to the FindThreat policy? (Choose two.)

Question24: Your network uses a single JSA host and you want to implement a cluster.
In this scenario, which two statements are correct? (Choose two.)

Question25: What are two types of system logs that Junos generates? (Choose two.)

Question26: Click the Exhibit button.

Referring to the exhibit, which statement is true?

Question27: After JSA receives external events and flows, which two steps occur? (Choose two.)

Question28: Your manager asks you to provide firewall and NAT services in a private cloud.
Which two solutions will fulfill the minimum requirements for this deployment? (Choose two.)

Question29: You must deploy AppSecure in your network to block risky applications.
In this scenario, which two AppSecure features are required? (Choose two.)

Question30: Click the Exhibit button.

Which two statements are true about the configuration shown in the exhibit? (Choose two.)

Question31: You enable chassis clustering on two devices and assign a cluster ID and a node ID to each device.
In this scenario, what is the correct order for rebooting the devices?

Question32: Which three statements are true about the difference between cSRX-based virtual security deployments and vSRX-based virtual security deployments? (Choose three.)

Question33: Exhibit

Using the information from the exhibit, which statement is correct?

Question34: Which two statements are true about mixing traditional and unified security policies? (Choose two.)

Question35: Exhibit

You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172 25.11.0/24 subnet to the Internet You create a policy named permit-http between the trust and untrust zones that permits HTTP traffic. When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.
Which two actions would correct the error? (Choose two.)

Question36: Which statement regarding Juniper Identity Management Service (JIMS) domain PC probes is true?

Question37: Which three features are parts of Juniper Networks' AppSecure suite? (Choose three.)

Question38: You are using the JIMS Administrator user interface to add multiple SRX client devices. You must share common configuration attributes across the SRX clients without having to re-enter those attributes for each SRX client instance.
Which JIMS Administrator feature would be used to accomplish this task?

Question39: Which two statements describe application-layer gateways (ALGs)? (Choose two.)

Question40: Click the Exhibit button.

Which two statements describe the output shown in the exhibit? (Choose two.)

Question41: After performing a software upgrade on an SRX5800 chassis cluster, you notice that node1 is in the primary state and node0 is in the backup state. Your network standards dictate that node0 should be in the primary state.
In this scenario, which command should be used to comply with the network standards?

Question42: Which two statements about unified security policies are correct? (Choose two.)

Question43: Your company is using the Juniper ATP Cloud free model. The current inspection profile is set at 10 MB You are asked to configure ATP Cloud so that executable files up to 30 MB can be scanned while at the same time minimizing the change in scan time for other file types.
Which configuration should you use in this scenario?

Question44: You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution.
Which action would accomplish this task?

Question45: You are deploying the Junos application firewall feature in your network.
In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)

Question46: Which statement about security policy schedulers is correct?

Question47: Which method does the loT Security feature use to identify traffic sourced from IoT devices?

Question48: When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)

Question49: Which two settings must be enabled on the hypervisor in a vSRX deployment to ensure proper chassis cluster operation? (Choose two.)

Question50: Which two statements are correct about Juniper ATP Cloud? (Choose two.)

Question51: You are deploying a vSRX into a vSphere environment which applies the configuration from a bootable ISO file containing the juniper.conf file. After the vSRX boots and has the configuration applied, you make additional device specific configuration changes, commit, and reboot the device. Once the device finishes rebooting, you notice the specific changes you made are missing but the original configuration is applied.
In this scenario, what is the problem?

Question52: After a software upgrade on an SRX5800 chassis cluster, you notice that both node0 and node1 are in the primary state, when node1 should be secondary. All control and fabric links are operating normally.
In this scenario, which step must you perform to recover the cluster?

Question53: Which two statements are correct about security policy changes when using the policy rematch feature? (Choose two.)

Question54: Click the Exhibit button.

Referring to the exhibit, which statement is true?

Question55: Which two statements describe SSL proxy on SRX Series devices? (Choose two.)

Question56: What are two types of attack objects used by IPS on SRX Series devices? (Choose two.)

Question57: You are asked to convert two standalone SRX Series devices to a chassis cluster deployment. You must ensure that your IPsec tunnels will be compatibla with the new deployment.
In this scenario, which two interfaces should be used when binding your tunnel endpoints? (Choose two.)

Question58: Which two statements describe IPS? (Choose two.)