EMT Practice Test

1. Question Content...

---

Question1: Click the Exhibit button.

A host is unable to communicate with a webserver. Referring to the exhibit, which statement is correct?

Question2: Click the Exhibit button.

You are asked to look at a configuration that is designed to take all traffic with a specific source IP address and forward the traffic to a traffic analysis server for further evaluation. The configuration is not working as intended.
Referring to the exhibit, which change must be made to correct the configuration?

Question3: You have downloaded and initiated the installation of the application package for the JATP Appliance on an SRX1500. You must confirm that the installation of the application package has completed successfully.
In this scenario, which command would you use to accomplish this task?

Question4: What is the correct application mapping sequence when a user goes to Facebook for the first time through an SRX Series device?

Question5: Your manager has notices a drop in productivity and believes it is due to employees checking their social media feeds too frequently. You are asked to provide analytical statistics for this traffic within your network on an hourly basis.
Which AppSecure feature should be used to collect this information?

Question6: You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restricted to the VLANs from which they originate.
Which configuration accomplishes these objectives?

Question7: Click the Exhibit button.

You are asked to look at a configuration that is designed to take all traffic with a specific source IP address and forward the traffic to a traffic analysis server for further evaluation. The configuration is not working as intended.
Referring to the exhibit, which change must be made to correct the configuration?

Question8: Which two VPN features are supported with CoS-based IPsec VPNs? (Choose two.)

Question9: Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

Question10: Click the Exhibit button.

Referring to the exhibit, what is the maximum number of zones that are able to be created within all logical systems?

Question11: Click the Exhibit button.

A user reports trouble when using SSH to a server outside your organization. The traffic traverses an SRX Series device that is performing NAT and applying security policies.
Referring to the exhibit, which configuration will allow you to see the bidirectional flow through the SRX Series device?
A)

B)

C)

D)

Question12: You have a remote access VPN where the remote users are using the NCP client. The remote users can access the internal corporate resources as intended; however, traffic that is destined to all other Internet sites is going through the remote access VPN. You want to ensure that only traffic that is destined to the internal corporate resources use the remote access VPN.
Which two actions should you take to accomplish this task? (Choose two.)

Question13: Click the Exhibit button.

Referring to the exhibit, you are attempting to enable IPsec power mode to improve IPsec VPN performance.
However, you are unable to use IPsec power mode.
What is the problem?

Question14: How does secure wire mode differ from transparent mode?

Question15: Exhibit.

Referring to the exhibit, which two statements are true? (Choose two.)

Question16: You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restricted to the VLANs from which they originate.
Which configuration accomplishes these objectives?
A)

B)

C)

D)

Question17: Click the Exhibit button.

A user reports trouble when using SSH to a server outside your organization. The traffic traverses an SRX Series device that is performing NAT and applying security policies.
Referring to the exhibit, which configuration will allow you to see the bidirectional flow through the SRX Series device?
A)

B)

C)

D)

Question18: You are asked to merge to corporate network with the network from a recently acquired company. Both networks use the same private IPv4 address space (172.25.126.0/24). An SRX Series device servers as the gateway for each network.
Which solution allows you to merge the two networks without modifying the current address assignments?

Question19: What are two important function of the Juniper Networks ATP appliance solution? (Choose two.).

Question20: Click the Exhibit button.

You have two hosts on the same subnet connecting to an SRX340 on interfaces ge-0/0/4 and ge-
0/0/5. However, the two hosts cannot communicate with each other.
Referring to the exhibit, what are two actions that would solve this problem? (Choose two.)

Question21: Click the Exhibit button.

Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)

Question22: Click the Exhibit button.

A user reports trouble when using SSH to a server outside your organization. The traffic traverses an SRX Series device that is performing NAT and applying security policies.
Referring to the exhibit, which configuration will allow you to see the bidirectional flow through the SRX Series device?

Question23: Click the Exhibit button.

Referring to the exhibit, you are attempting to enable IPsec power mode to improve IPsec VPN performance.
However, you are unable to use IPsec power mode.
What is the problem?

Question24: Click the Exhibit button.

Your company has purchased a competitor and now must connect the new network to the existing one. The competitor's gateway device is receiving its ISP address using DHCP. Communication between the two sites must be secured; however, obtaining a static public IP address for the new site gateway is not an option at this time. The company has several requirements for this solution:
* A site-to-site IPsec VPN must be used to secure traffic between the two sites;
* The IKE identity on the new site gateway device must use the hostname option; and
* Internet traffic from each site should exit through its local Internet connection.
The configuration shown in the exhibit has been applied to the new site's SRX, but the secure tunnel is not working.
In this scenario, what configuration change is needed for the tunnel to come up?

Question25: Exhibit.

Referring to the exhibit, a spoke member of an ADVPN is not functioning correctly.
Which two commands will solve this problem? (Choose two.)

Question26: Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

Question27: Referring to the exhibit, which two statements are true? (Choose two.)

Question28: Exhibit.

Referring to the exhibit, which two statements are true? (Choose two.)

Question29: Your SRX Series device does not see the SYN packet.
What is the default action in this scenario?

Question30: You are asked to configure an IPsec VPN between two SRX Series devices that allows for processing of CoS on the intermediate routers.
What will satisfy this requirement?

Question31: What is a function of UTM?

Question32: Click the Exhibit button.

You have configured an ADVPN that is operational. However, OSPF will not establish correctly across the ADVPN tunnels.
Referring to the exhibit, which two commands will solve the problem? (Choose two.)
[edit protocols ospf area 0.0.0.0]

Question33: A local user complains that they cannot connect to an FTP server on the DMZ network.
You investigate and confirm that the security policy allows FTP traffic from the trust zone to the DMZ zone.
What are two reasons for this problem? (Choose two.)

Question34: Which three roles or protocols are required when configuring an ADVPN? (Choose three.)

Question35: Exhibit.

A hub member of an ADVPN is not functioning correctly.
Referring the exhibit, which action should you take to solve the problem?

Question36: You are using the integrated user firewall feature on an SRX Series device. Which three parameters are stored in the Active Directory authentication table? (Choose three.)

Question37: Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

Question38: Click the Exhibit button.

You deployed a site-to-site IPsec VPN connecting two data centers together using SRX5800s.
After examining the performance of the IPsec VPN, you decide to enable IPsec performance acceleration to increase the rate of traffic that can be sent through the tunnel.
Referring to the exhibit, which two statements should you add to the configuration to accomplish this task? (Choose two.)

Question39: Which two statements are true about ADVPN members? (Choose two.)

Question40: You are asked to configure a new SRX Series CPE device at a remote office. The device must participate in forwarding MPLS and IPsec traffic.
Which two statements are true regarding this implementation? (Choose two.)

Question41: Click the Exhibit button.

A host is unable to communicate with a webserver.
Referring to the exhibit, which statement is correct?

Question42: Which two additional configuration actions are necessary for the third-party feed shown in the exhibit to work properly? (Choose two.)

Question43: You are configuring transparent mode on an SRX Series device. You must permit IP-based traffic only, and BPDUs must be restricted to the VLANs from which they originate.
Which configuration accomplishes these objectives?

Question44: Click the Exhibit button.

You have two hosts on the same subnet connecting to an SRX340 on interfaces ge-0/0/4 and ge-0/0/5.
However, the two hosts cannot communicate with each other.
Referring to the exhibit, what are two actions that would solve this problem? (Choose two.)

Question45: Click the Exhibit button.

You deployed a site-to-site IPsec VPN connecting two data centers together using SRX5800s. After examining the performance of the IPsec VPN, you decide to enable IPsec performance acceleration to increase the rate of traffic that can be sent through the tunnel.
Referring to the exhibit, which two statements should you add to the configuration to accomplish this task? (Choose two.)

Question46: Click the Exhibit button.

You have recently committed the IPS policy shown in the exhibit. When evaluating the expected behavior, you notice that you have a session that matches all the rules in your IPS policy.
In this scenario, which action would be taken?

Question47: You are asked to set up notifications if one of your collector traffic feeds drops below 100 kbps.
Which two configuration parameters must be set to accomplish this task? (Choose two.)

Question48: Which feature of Sky ATP is deployed with Software-Defined Secure Networks?

Question49: Click the Exhibit button.

Given the command output shown in the exhibit, which two statements are true? (Choose two.)

Question50: Click the Exhibit button.

Your company has purchased a competitor and now must connect the new network to the existing one. The competitor's gateway device is receiving its ISP address using DHCP. Communication between the two sites must be secured; however, obtaining a static public IP address for the new site gateway is not an option at this time. The company has several requirements for this solution:
* A site-to-site IPsec VPN must be used to secure traffic between the two sites;
* The IKE identity on the new site gateway device must use the hostname option; and
* Internet traffic from each site should exit through its local Internet connection.
The configuration shown in the exhibit has been applied to the new site's SRX, but the secure tunnel is not working.
In this scenario, what configuration change is needed for the tunnel to come up?

Question51: Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

Question52: Click the Exhibit button.

You have configured tenant systems on your SRX Series device.
Referring to the exhibit, which two actions should you take to facilitate inter-TSYS communication?
(Choose two.)

Question53: You have the NAT rule, shown in the exhibit, applied to allow communication across an IPsec tunnel between your two sites with identical networks. Which statement is correct in this scenario?

Question54: You are asked to merge to corporate network with the network from a recently acquired company.
Both networks use the same private IPv4 address space (172.25.126.0/24). An SRX Series device servers as the gateway for each network.
Which solution allows you to merge the two networks without modifying the current address assignments?

Question55: The monitor traffic interface command is being used to capture the packets destined to and the from the SRX Series device.
In this scenario, which two statements related to the feature are true? (Choose two.)

Question56: Click the Exhibit button.

A user is trying to reach a company's website, but the connection errors out. The security policies are configured correctly.
Referring to the exhibit, what is the problem?

Question57: You have configured three logical tunnel interfaces in a tenant system on an SRX1500 device. When committing the configuration, the commit fails.
In this scenario, what would cause this problem?

Question58: Click the Exhibit button.

Which statement is correct regarding the information show in the exhibit?

Question59: Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

Question60: You are asked to look at a configuration that is designed to take all traffic with a specific source ip address and forward the traffic to a traffic analysis server for further evaluation.
The configuration is no longer working as intended.
Referring to the exhibit which change must be made to correct the configuration?

Question61: In which two ways are tenant systems different from logical systems? (Choose two.)

Question62: You are asked to configure an SRX Series device to bypass all security features for IP traffic from the engineering department.
Which firewall filter will accomplish this task?
A)

B)

C)

D)

Question63: Click the Exhibit button.

While configuring the SRX345, you review the MACsec connection between devices and note that it is not working.
Referring to the exhibit, which action would you use to identify problem?

Question64: You have set up Sky ATP with the SRX Series devices in your network. However, your SRX Series devices are unable to communicate with the Sky ATP cloud because the communication is being blocked by a gateway network device.
Which two actions should you take to solve the problem? (Choose two.)

Question65: Click the Exhibit button.

Which statement is correct regarding the information show in the exhibit?

Question66: You have a webserver and a DNS server residing in the same internal DMZ subnet. The public Static NAT addresses for the servers are in the same subnet as the SRX Series devices internet-facing interface. You implement DNS doctoring to ensure remote users can access the webserver.Which two statements are true in this scenario? (Choose two.)

Question67: Which interface family is required for Layer 2 transparent mode on SRX Series devices?

Question68: Click the Exhibit button.

Referring to the exhibit, what is the maximum number of zones that are able to be created within all logical systems?

Question69: Your organization has multiple Active Directory domains to control user access. You must ensure that security policies are passing traffic based upon the users' access rights.
What would you use to assist your SRX Series devices to accomplish this task?

Question70: You have downloaded and initiated the installation of the application package for the JATP Appliance on an SRX1500. You must confirm that the installation of the application package has completed successfully.
In this scenario, which command would you use to accomplish this task?

Question71: When would you use the port-overloading-factor 1 setting?

Question72: Click the Exhibit button.

When attempting to enroll an SRX Series device to JATP, you receive the error shown in the exhibit.
What is the cause of the error?

Question73: Click the Exhibit button.

Given the command output shown in the exhibit, which two statements are true? (Choose two.)

Question74: You are creating an IPS policy with multiple rules. You want traffic that matches rule 5 to silently be dropped, along with any future packets that match the appropriate attributes of the incoming traffic.
In this scenario, which ip-action parameter should you use?

Question75: You must implement an IPsec VPN on an SRX Series device using PKI certificates for authentication. As part of the implementation, you are required to ensure that the certificate submission, renewal, and retrieval processes are handled automatically from the certificate authority.
In this scenario, which statement is correct.

Question76: What are two important functions of the Juniper Networks ATP Appliance solution? (Choose two.)

Question77: How does secure wire mode differ from transparent mode?

Question78: Your SRX Series device does not see the SYN packet.
What is the default action in this scenario?

Question79: Exhibit.

A hub member of an ADVPN is not functioning correctly.
Referring the exhibit, which action should you take to solve the problem?

Question80: Click the Exhibit button.

You are asked to look at a configuration that is designed to take all traffic with a specific source IP address and forward the traffic to a traffic analysis server for further evaluation. The configuration is not working as intended.
Referring to the exhibit, which change must be made to correct the configuration?

Question81: Click the Exhibit button.

Your company has purchased a competitor and now must connect the new network to the existing one. The competitor's gateway device is receiving its ISP address using DHCP.
Communication between the two sites must be secured; however, obtaining a static public IP address for the new site gateway is not an option at this time. The company has several requirements for this solution:
- A site-to-site IPsec VPN must be used to secure traffic between the
two sites;
- The IKE identity on the new site gateway device must use the hostname option; and
- Internet traffic from each site should exit through its local
Internet connection.
The configuration shown in the exhibit has been applied to the new site's SRX, but the secure tunnel is not working.
In this scenario, what configuration change is needed for the tunnel to come up?

Question82: Click the Exhibit button.

You have enabled mixed mode on an SRX Series device.
You are unable to commit the configuration shown in the exhibit.
What is the problem in this scenario?

Question83: Exhibit.

Referring to the exhibit, a spoke member of an ADVPN is not functioning correctly.
Which two commands will solve this problem? (Choose two.)

Question84: Exhibit.

Referring to the exhibit, which two statements are true? (Choose two.)

Question85: Referring to the exhibit, how many AppTrack logs will be generated for an HTTP session lasting
12 minutes?

Question86: Your network includes SRX Series devices at all headquarter, data center, and branch locations.
The headquarter and data center locations use high-end SRX Series devices, and the branch locations use branch SRX Series devices. You are asked to deploy IPS on the SRX Series devices using one of the available IPS deployment modes.
In this scenario, which two statements are true? (Choose two.)

Question87: You must ensure that your Layer 2 traffic is secured on your SRX Series device in transparent mode.
What must be considered when accomplishing this task?

Question88: Click the Exhibit button.

The exhibit shows a snippet of a security flow trace. A user cannot open an SSH session to a server. Which action will solve the problem?

Question89: You are using destination NAT to translate the address of your HTTPS server to a private address on your SRX Series device. You have decided to implement IDP SSL decryption.
Upon enabling the decryption, you notice sessions are not decrypted.
Which action resolves the problem?

Question90: Which statement about transparent mode on an SRX340 is true?

Question91: You are asked to secure your network against TOR network traffic.
Which two Juniper products would accomplish this task? (Choose two.)

Question92: What are two important functions of the Juniper Networks ATP Appliance solution? (Choose two.)

Question93: Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

Question94: Click the Exhibit button.

Referring to the exhibit, which statement is true?

Question95: You have designed the firewall filter shown in the exhibit to limit SSH control traffic to yours SRX Series device without affecting other traffic.
Which two statement are true in this scenario? (Choose two.)

Question96: You are connecting two remote sites to your corporate headquarters site; you must ensure that all traffic is secured and only uses a single Phase 2 SA for both sites.
In this scenario, which VPN should be used?

Question97: Which two statements are true about ADVPN members? (Choose two.)

Question98: You are asked to implement the session cache feature on an SRX5400.
In this scenario, what information does a session cache entry record? (Choose two.)

Question99: Which two log format types are supported by the JATP appliance? (Choose two.)

Question100: Click the Exhibit button.

You have recently committed the IPS policy shown in the exhibit. When evaluating the expected behavior, you notice that you have a session that matches all the rules in your IPS policy.
In this scenario, which action would be taken?

Question101: You have been notified by your colocation provider that your infrastructure racks will no longer be adjacent to each other.
In this scenario, which technology would you use to secure all Layer 2 and Layer 3 traffic between racks?

Question102: In a Juniper ATP Appliance, what would be a reason for the mitigation rule to be in the failed-remove state?

Question103: You have downloaded and initiated the installation of the application package for the JATP Appliance on an SRX1500. You must confirm that the installation of the application package has completed successfully.
In this scenario, which command would you use to accomplish this task?

Question104: Click the Exhibit button.

The UTM policy shown in the exhibit has been applied to a security policy on a branch SRX Series device.
In this scenario, which statement is true?

Question105: Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

Question106: Click the Exhibit button.

Referring to the exhibit, which statement is true?

Question107: Exhibit.

Referring to the exhibit, which two statements are true? (Choose two.)

Question108: Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

Question109: Click the Exhibit button.

A user reports trouble when using SSH to a server outside your organization. The traffic traverses an SRX Series device that is performing NAT and applying security policies.
Referring to the exhibit, which configuration will allow you to see the bidirectional flow through the SRX Series device?

Question110: Click the Exhibit button.

You deployed a site-to-site IPsec VPN connecting two data centers together using SRX5800s. After examining the performance of the IPsec VPN, you decide to enable IPsec performance acceleration to increase the rate of traffic that can be sent through the tunnel.
Referring to the exhibit, which two statements should you add to the configuration to accomplish this task?
(Choose two.)

Question111: Click the Exhibit button.

Referring to the exhibit, you are attempting to enable IPsec power mode to improve IPsec VPN performance. However, you are unable to use IPsec power mode.
What is the problem?

Question112: You must implement an IPsec VPN on an SRX Series device using PKI certificates for authentication.
As part of the implementation, you are required to ensure that the certificate submission, renewal, and retrieval processes are handled automatically from the certificate authority.
In this scenario, which statement is correct.

Question113: Click the Exhibit button.

Referring to the exhibit, which three topologies are supported by Policy Enforcer? (Choose three.)

Question114: Click the Exhibit button.

The IKE policy and proposal are configured properly on both devices as shown in the exhibit.
Which configuration snippet will complete the IKE configuration on the branch SRX Series device?

Question115: Click the Exhibit button.

Referring to the exhibit, you are attempting to enable IPsec power mode to improve IPsec VPN performance. However, you are unable to use IPsec power mode.
What is the problem?

Question116: You are not able to activate the SSH honeypot on the all-in-one Juniper ATP appliance.
What would be a cause of this problem?

Question117: The Software-Defined Secure Networks Policy Enforcer contains which two components?
(Choose two.)

Question118: After downloading the new IPS attack database, the installation of the new database fails.
What caused this condition?

Question119: You have designed the firewall filter shown in the exhibit to limit SSH control traffic to yours SRX Series device without affecting other traffic.
Which two statement are true in this scenario? (Choose two.)

Question120: Click the Exhibit button.

You have configured an ADVPN that is operational. However, OSPF will not establish correctly across the ADVPN tunnels.
Referring to the exhibit, which two commands will solve the problem? (Choose two.)

Question121: You need to add all of the sites in the domain example.com to urllist2. You decide to use wildcards to account for any changes made to the domain in the future.
In this scenario, which two commands would you use to meet this requirement? (Choose two.)

Question122: Click the Exhibit button.

Referring to the exhibit, what is the maximum number of zones that are able to be created within all logical systems?