EMT Practice Test

1. Question Content...

---

Question1: You configured a chassis cluster for high availability on an SRX Series device and enrolled this HA cluster with the Juniper ATP Cloud.
Which two statements are correct in this scenario? (Choose two.)

Question2: You have configured the SRX Series device to switch packets for multiple directly connected hosts that are within the same broadcast domain. However, the traffic between two hosts in the same broadcast domain are not matching any security policies.
Referring to the exhibit, what should you do to solve this problem?

Question3: You are using ATP Cloud and notice that there is a host with a high number of ETI and C&C hits sourced from the same investigation and notice that some of the events have not been automatically mitigated.
Referring to the exhibit, what is a reason for this behavior?

Question4: You have the NAT rule, shown in the exhibit, applied to allow communication across an IPsec tunnel between your two sites with identical networks. Which statement is correct in this scenario?

Question5: You are asked to configure a security policy on the SRX Series device. After committing the policy, you receive the "Policy is out of sync between RE and PFE <SPU-name(s)>." error.
Which command would be used to solve the problem?

Question6: A hub member of an ADVPN is not functioning correctly.

Referring the exhibit, which action should you take to solve the problem?

Question7: Your organization has multiple Active Directory domain to control user access. You must ensure that security polices are passing traffic based upon the user's access rights. What would you use to assist your SRX series devices to accomplish this task?

Question8: You are asked to implement the AppFW feature on an SRX Series device.
Which three tasks must be performed to make the feature work? (Choose three.)

Question9: Regarding IPsec CoS-based VPNs, what is the number of IPsec SAs associated with a peer based upon?

Question10: You are using traceoptions to verify NAT session information on your SRX Series device.
Referring to the exhibit, which two statements are correct? (Choose two.)

Question11: Click the Exhibit button.

When attempting to enroll an SRX Series device to JATP, you receive the error shown in the exhibit.
What is the cause of the error?

Question12: Your company recently acquired a competitor. You want to use using the same IPv4 address space as your company.
Referring to the exhibit, which two actions solve this problem? (Choose two)

Question13: What are two valid modes for the Juniper ATP Appliance? (Choose two.)

Question14: You must implement an IPsec VPN on an SRX Series device using PKI certificates for authentication. As part of the implementation, you are required to ensure that the certificate submission, renewal, and retrieval processes are handled automatically from the certificate authority.
In this scenario, which statement is correct.

Question15: Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

Question16: You are asked to download and install the IPS signature database to a device operating in chassis cluster mode. Which statement is correct in this scenario?

Question17: Your Source NAT implementation uses an address pool that contains multiple IPv4 addresses.
Your users report that when they establish more than one session with an external application, they are prompted to authenticate multiple times External hosts must not be able to establish sessions with internal network hosts.
What will solve this problem?

Question18: You are asked to configure an IPsec VPN between two SRX Series devices that allows for processing of CoS on the intermediate routers.
What will satisfy this requirement?

Question19: Click the Exhibit button.

While configuring the SRX345, you review the MACsec connection between devices and note that it is not working.
Referring to the exhibit, which action would you use to identify problem?

Question20: You have configured three logical tunnel interfaces in a tenant system on an SRX1500 device.
When committing the configuration, the commit fails.
In this scenario, what would cause this problem?

Question21: You are asked to implement a Dynamic IPsec VPN on your new SRX240. You are required to facilitate up to 5 simultaneous users.
Which two statements must be considered when accomplishing the task?

Question22: Which two log format types are supported by the JATP appliance? (Choose two.)

Question23: Which two additional configuration actions are necessary for the third-party feed shown in the exhibit to work properly? (Choose two.)

Question24: Which two statements are correct about the output shown in the exhibit? (Choose two.)

Question25: Your company wants to use the Juniper Seclntel feeds to block access to known command and control servers, but they do not want to use Security Director to manage the feeds.
Which two Juniper devices work in this situation? (Choose two)

Question26: You are requested to enroll an SRX Series device with Juniper ATP Cloud.
Which statement is correct in this scenario?

Question27: Which configurable SRX Series device feature allows you to capture transit traffic?

Question28: You want to identify potential threats within SSL-encrypted sessions without requiring SSL proxy to decrypt the session contents. Which security feature achieves this objective?

Question29: You are trying to configure an IPsec tunnel between SRX Series devices in the corporate office and branch1. You have committed the configuration shown in the exhibit, but the IPsec tunnel is not establishing.
In this scenario, what would solve this problem?

Question30: Click the Exhibit button.

You are implementing a new branch site and want to ensure Internet traffic is sent directly to your ISP and other traffic is sent to your company headquarters. You have configured filter-based forwarding to accomplish this objective. You verify proper functionality using the outputs shown in the exhibit.
Which two statements are true in this scenario? (Choose two.)

Question31: Your manager asks you to show which attacks have been detected on your SRX Series device using the IPS feature.
Which command would you use to accomplish this task?

Question32: Referring to the exhibit, which two statements are true? (Choose two.)

Question33: You are asked to determine if the 203.0.113.5 IP address has been added to the third-party security feed, DS hield, from Juniper Seclnte1.
You have an SRX Series device that is using Seclnte1 feeds from Juniper ATP Cloud.
Which command will return this information?

Question34: Which two statements are correct about the output shown in the exhibit? (Choose two.)

Question35: Referring to the exhibit, an internal host is sending traffic to an Internet host using the 203.0.113.1 reflexive address with source port 54311.
Which statement is correct in this situation?

Question36: You are asked to implement the session cache feature on an SRX5400.
In this scenario, what information does a session cache entry record? (Choose two.)

Question37: The exhibit shows a snippet of a security flow trace. In this scenario, which two statements are correct? (Choose two.)

Question38: Click the Exhibit button. IPv6 to IPv4 addresses are not being translated as shown in the exhibit.

Which two configurations would resolve the problem? (Choose two.)

Question39: You are connecting two remote sites to your corporate headquarters site; you must ensure that all traffic is secured and only uses a single Phase 2 SA for both sites.
In this scenario, which VPN should be used?

Question40: Your IPsec VPN configuration uses two CoS forwarding classes to separate voice and data traffic. How many IKE security associations are required between the IPsec peers in this scenario?

Question41: Click the Exhibit button.

Referring to the exhibit, which statement is true?

Question42: The monitor traffic interface command is being used to capture the packets destined to and the from the SRX Series device.
In this scenario, which two statements related to the feature are true? (Choose two.)

Question43: You have initiated the download of the IPS signature database on your SRX Series device.
Which command would you use to confirm the download has completed?

Question44: Referring to the exhibit, which three statements are true? (Choose three.)

Question45: Which two statements about AppQoS are true? (Choose two.)

Question46: You are asked to detect domain generation algorithms
Which two steps will accomplish this goal on an SRX Series firewall? (Choose two.)

Question47: An administrator wants to configure an SRX Series device to log binary security events for tenant systems.
Referring to the exhibit, which statement would complete the configuration?

Question48: Which two types of source NAT translations are supported in this scenario? (Choose two.)

Question49: You have configured static NAT for a webserver in your DMZ. Both internal and external users can reach the webserver using the webserver's IP address. However, only internal users can reach the webserver using the webserver's DNS name. When external users attempt to reach the webserver using the webserver's DNS name, an error message is received.
Which action would solve this problem?

Question50: You are connecting two remote sites to your corporate headquarters site.
You must ensure that all traffic is secured and sent directly between sites.
In this scenario, which VPN should be used?

Question51: Click the Exhibit button.

You have recently committed the IPS policy shown in the exhibit. When evaluating the expected behavior, you notice that you have a session that matches all the rules in your IPS policy.
In this scenario, which action would be taken?

Question52: Referring to the exhibit, which type of NAT is being performed?

Question53: Which two statements are correct regarding tenant systems on SRX Series devices? (Choose two.)

Question54: You want to route traffic between two newly created virtual routers without the use of logical systems using the configuration options on the SRX5800.
Which two methods of forwarding, between virtual routers, would you recommend? (Choose two.)

Question55: Your company uses non-Juniper firewalls and you are asked to provide a Juniper solution for zero-day malware protection. Which solution would work in this scenario?

Question56: Which interface family is required for Layer 2 transparent mode on SRX Series devices?

Question57: You must troubleshoot ongoing problems with IPsec tunnels and security policy processing. Your network consists of SRX340s and SRX5600s.
In this scenario, which two statements are true? (Choose two.)

Question58: While troubleshooting security policies, you added the count action.
Where do you see the result of this action?

Question59: You have set up Security Director with Policy Enforcer and have configured 12 third-party feeds and a Sky ATP feed. You are also injecting 16 feeds using the available open API. You want to add another compatible feed using the available open API, but Policy Enforcer is not receiving the new feed.
What is the problem in this scenario?

Question60: You are asked to deploy filter-based forwarding on your SRX Series device for incoming traffic sourced from the 10.10.100.0/24 network.
In this scenario, which three statements are correct? (Choose three.)

Question61: All interfaces involved in transparent mode are configured with which protocol family?

Question62: Your organization has multiple Active Directory domains to control user access. You must ensure that security policies are passing traffic based upon the users' access rights.
What would you use to assist your SRX Series devices to accomplish this task?

Question63: Referring to the exhibit, which three protocols will be allowed on the ge-0/0/5.0 interface?
(Choose three.)

Question64: Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

Question65: Which Junos security feature is used for signature-based attack prevention?

Question66: You are asked to ensure that your IPS engine blocks attacks. You must ensure that your system continues to drop additional malicious traffic without additional IPS processing for up to 30 minutes. You must ensure that the SRX Series device does send a notification packet when the traffic is dropped.
Which statement is correct?

Question67: The highlighted incident (arrow) shown in the exhibit shows a progression level of "Download" in the kill chain.
What are two appropriate mitigation actions for the selected incident? (Choose two.)