What information does encrypted traffic insights (ETI) use to notify SRX Series devices about known malware sites?

The correct answer is D. domain names. Encrypted traffic insights (ETI) uses domain names to notify SRX Series devices about known malware sites. ETI is a feature of the SRX Series firewall that can detect and block malware that is hidden in encrypted traffic. It works by analyzing the domain names of the websites…

Juniper Advanced Threat Prevention (ATP)

Question

Options

Acertificates
Bdynamic address groups
CMAC addresses
Ddomain names

How the community answered

(32 responses)

A
3% (1)
B
3% (1)
D
94% (30)

Explanation

Encrypted traffic insights (ETI) uses domain names to notify SRX Series devices about known malware sites. ETI is a feature of the SRX Series firewall that can detect and block malware that is hidden in encrypted traffic. It works by analyzing the domain names of the websites that the encrypted traffic is attempting to access. If the domain name matches a known malware site, ETIwill send an alert to the SRX Series device, which can then take appropriate action to block the traffic. ETI is a useful tool for protecting against threats that attempt to evade detection by hiding in encrypted traffic.

Topics

#Encrypted Traffic Insights#ETI#malware sites#domain names

Community Discussion

No community discussion yet for this question.

Full JN0-336 Practice