JN0-541 Exam Questions

Which statement is true about the attack object database update process?

On a sensor, which command will indicate if log messages are being sent to Security Manager?

After you enable alerts for new hosts that are detected by the Enterprise Security Profiler, where do you look in Security Manager to see those alerts?

When connecting to a sensor using SSH, which account do you use to login?

Which OSI layer(s) of a packet does the IDP sensor examine?

Which two will change the management IP of an IDP sensor? (Choose two.)

Which rule base would detect netcat?

Which three fields in a packet must match an IDP rule before that packet is examined for an attack? (Choose three.)

What is "a deviation from a protocol's expected behavior or packet format"?

Juniper JN0-541 Exam A newly re-imaged sensor is running IDP 4.0 code. You want to assign IP address 10.1.1.1 to the sensor. Which method do you use to do this?

Which rule base would detect the use of nmap on a network?

Which type of cable do you use for a console connection to an IDP sensor?

Which statement is true regarding IDP rule matching on a sensor?

Which TCP port is used for communication between Security Manager and an IDP sensor?

Which command on the IDP sensor CLI can be used to display the sensor statistics, which policy is installed, and mode of sensor deployment?

Which statement is true about packet capture in the IDP sensor?

Which statement about the Enterprise Security Profiler (ESP) is true?

What is one use of an IP action?

You update your attack object database on Security Manager. What must you do before the new Juniper JN0-541 Exam attack objects become active on the IDP sensors?

In the exhibit, which SYN protector mode is the IDP using?

Which two statements are true as they relate to a sniffer mode IDP sensor deployment? (Choose two.)

If an IDP sensor finds that a packet matchesa particular IDP rule, and then finds a matching exempt rule, what does the sensor do?

Which three actions must be taken prior to deploying an IDP sensor (in transparent mode) in a network?

In the exhibit, which rule base would have generated the log message?

What is "a unique pattern that always exists within an attack"?

Which sensor command can be used to determine if profiler data is being sent to Security Manager?

Which three statements are true as they relate to a transparent mode IDP deployment? (Choose three.)

Which sensor process handles all communication between the sensor and Security Manager?

Which three columns can be seen in the Application View of the Enterprise Security Profiler? (Choose three.)

In Enterprise Security Profiler (ESP), what is a permitted object?

Given the following steps:

You can remotely administer the IDP sensor using which two methods? (Choose two.)

Which statement is true about reverting Security Policies?

Which statement is true about the Attack Object Update process?

Which three actions must be taken prior to deploying an IDP sensor (in transparent mode) in a network?

Which statement is true regarding policy installation on an IDP sensor?

In IDP Sensor clustering, which port is used to send state synchronization information to other devices in the cluster?

Which three fields in a packet must match an IDP rule before that packet is examined for an attack? (Choose three.)

What is one use of an IP action?

Which two statements are true about the Enterprise Security Profiler (ESP)? (Choose two.)

Which type of cable do you use for a console connection to an IDP sensor?

Which sctop option will display current TCP flows through the sensor?

Which TCP port is used for communication between ACM and an IDP sensor?

Which account do you use to login when connecting to a sensor using SSL?

In the exhibit, which sensor command would have produced this display?

On a newly re-imaged sensor, which three TCP ports are open on its eth0 interface? (Choose three.)

Which tool will allow you to change a sensor's deployment mode?

Which sensor command will unload the current policy?

Which sctop option will display current throughput rate for the sensor?

Which three are assigned as a result of running EasyConfig? (Choose three.)