What are three capabilities of AppQoS? (Choose three.)
What are three capabilities of AppQoS? (Choose three.)A . re-write DSCP valuesB . assign a forwarding classC . re-write the TTLD . rate-limit trafficE . reserve bandwidthView AnswerAnswer: A B D Explanation: AppQoS can modify the DSCP (Differentiated Services Code Point) values in IP packet headers. This is crucial for...
Regarding static attack object groups, which two statements are true? (Choose two.)
Regarding static attack object groups, which two statements are true? (Choose two.)A . Matching attack objects are automatically added to a custom group.B . Group membership automatically changes when Juniper updates the IPS signature database.C . Group membership does not automatically change when Juniper updates the IPS signature database.D ....
What are two benefits of using a vSRX in a software-defined network? (Choose two.)
What are two benefits of using a vSRX in a software-defined network? (Choose two.)A . scalabilityB . no required software licenseC . granular securityD . infinite number of interfacesView AnswerAnswer: A C Explanation: - Scalability: vSRX instances can be easily added or removed as the needs of the network change,...
Which feed will the clients IP address be automatically added to in this situation?
A client has attempted communication with a known command-and-control server and it has reached the configured threat level threshold. Which feed will the clients IP address be automatically added to in this situation?A . the command-and-control cloud feedB . the allowlist and blocklist feedC . the custom cloud feedD ....
Which action should you take in this situation?
You are asked to reduce the load that the JIMS server places on your Which action should you take in this situation?A . Connect JIMS to the RADIUS serverB . Connect JIMS to the domain Exchange serverC . Connect JIMS to the domain SQL server.D . Connect JIMS to another...
Which two statements are correct about SSL proxy server protection? (Choose two.)
Which two statements are correct about SSL proxy server protection? (Choose two.)A . You do not need to configure the servers to use the SSL proxy the function on the SRX Series device.B . You must load the server certificates on the SRX Series device.C . The servers must be...
In this scenario, why would you use a vSRX instead of a cSRX?
You want to deploy a virtualized SRX in your environment. In this scenario, why would you use a vSRX instead of a cSRX? (Choose two.)A . The vSRX supports Layer 2 and Layer 3 configurations.B . Only the vSRX provides clustering.C . The vSRX has faster boot times.D . Only...
Which module in the AppSecure suite will help in this task?
You want to use IPS signatures to monitor traffic. Which module in the AppSecure suite will help in this task?A . AppTrackB . AppQoSC . AppFWD . APPIDView AnswerAnswer: C Explanation: The AppFW module in the AppSecure suite provides IPS signatures that can be used to monitor traffic and detect...
Which two actions would correct the error?
Exhibit You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172 25.11.0/24 subnet to the Internet You create a policy named permit-http between the trust and untrust zones that permits HTTP traffic. When you issue a commit command to...
Which two types of SSL proxy are available on SRX Series devices? (Choose two.)
Which two types of SSL proxy are available on SRX Series devices? (Choose two.)A . Web proxyB . client-protectionC . server-protectionD . DNS proxyView AnswerAnswer: B C Explanation: Based on SSL proxy is a feature that allows SRX Series devices to decrypt and inspect SSL/TLS traffic for security purposes. According...