EMT Practice Test

1. Question Content...

---

Question1: What are two important functions of the Juniper Networks ATP Appliance solution? (Choose two.)

Question2: Click the Exhibit button.

Given the command output shown in the exhibit, which two statements are true? (Choose two.)

Question3: You are asked to configure a new SRX Series CPE device at a remote office. The device must participate in forwarding MPLS and IPsec traffic.
Which two statements are true regarding this implementation? (Choose two.)

Question4: What are two important function of the Juniper Networks ATP appliance solution? (Choose two.).

Question5: You have set up Security Director with Policy Enforcer and have configured 12 third-party feeds and a Sky ATP feed. You are also injecting 16 feeds using the available open API. You want to add another compatible feed using the available open API, but Policy Enforcer is not receiving the new feed.
What is the problem in this scenario?

Question6: Click the Exhibit button.

You have recently committed the IPS policy shown in the exhibit. When evaluating the expected behavior, you notice that you have a session that matches all the rules in your IPS policy.
In this scenario, which action would be taken?

Question7: You are asked to configure an SRX Series device to bypass all security features for IP traffic from the engineering department.
Which firewall filter will accomplish this task?
A)

B)

C)

D)

Question8: You have downloaded and initiated the installation of the application package for the JATP Appliance on an SRX1500. You must confirm that the installation of the application package has completed successfully.
In this scenario, which command would you use to accomplish this task?

Question9: Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

Question10: Your organization has multiple Active Directory domain to control user access. You must ensure that security polices are passing traffic based upon the user's access rights.
What would you use to assist your SRX series devices to accomplish this task?

Question11: Which feature of Sky ATP is deployed with Policy Enforcer?

Question12: You issue the command shown in the exhibit.
Which policy will be active for the identified traffic?

Question13: You are asked to look at a configuration that is designed to take all traffic with a specific source ip address and forward the traffic to a traffic analysis server for further evaluation. The configuration is no longer working as intended.
Referring to the exhibit which change must be made to correct the configuration?

Question14: You are not able to activate the SSH honeypot on the all-in-one Juniper ATP appliance.
What would be a cause of this problem?

Question15: You are asked to configure a security policy on the SRX Series device. After committing the policy, you receive the "Policy is out of sync between RE and PFE <SPU-name(s)>." error.
Which command would be used to solve the problem?

Question16: Click the Exhibit button.

You deployed a site-to-site IPsec VPN connecting two data centers together using SRX5800s. After examining the performance of the IPsec VPN, you decide to enable IPsec performance acceleration to increase the rate of traffic that can be sent through the tunnel.
Referring to the exhibit, which two statements should you add to the configuration to accomplish this task?
(Choose two.)

Question17: You have configured three logical tunnel interfaces in a tenant system on an SRX1500 device. When committing the configuration, the commit fails.
In this scenario, what would cause this problem?

Question18: Which interface family is required for Layer 2 transparent mode on SRX Series devices?

Question19: Click the Exhibit button.

Which type of NAT is shown in the exhibit?

Question20: How does secure wire mode differ from transparent mode?

Question21: Click the Exhibit button.

A host is unable to communicate with a webserver. Referring to the exhibit, which statement is correct?

Question22: Exhibit.

Referring to the exhibit, a spoke member of an ADVPN is not functioning correctly.
Which two commands will solve this problem? (Choose two.)

Question23: Click the Exhibit button.

Referring to the exhibit, which statement is true?

Question24: According to the log shown in the exhibit, you notice the IPsec session is not establishing.
What is the reason for this behavior?

Question25: Click the Exhibit button.

Branch 1 and Branch 2 have an active VPN tunnel configured, but internal hosts cannot communicate with each other.
Referring to the exhibit, which type of configuration should be applied to solve the problem?

Question26: Which two statements are true about ADVPN members? (Choose two.)

Question27: Exhibit.

Referring to the exhibit, which two statements are true? (Choose two.)

Question28: You have a remote access VPN where the remote users are using the NCP client. The remote users can access the internal corporate resources as intended; however, traffic that is destined to all other Internet sites is going through the remote access VPN. You want to ensure that only traffic that is destined to the internal corporate resources use the remote access VPN.
Which two actions should you take to accomplish this task? (Choose two.)

Question29: You are asked to configure an IPsec VPN between two SRX Series devices that allows for processing of CoS on the intermediate routers.
What will satisfy this requirement?

Question30: Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

Question31: You have noticed a high number of TCP-based attacks directed toward your primary edge device. You are asked to configure the IDP feature on your SRX Series device to block this attack.
Which two IDP attack objects would you configure to solve this problem? (Choose two.)