JN0-541 Exam Questions

Within the SYN protector rule base, what is the function of relay action?

Which sensor process handles policy installation?

Which two statements are true? (Choose two.)

Which two statements describe action versus IP action? (Choose two.)

In order to obtain attack information so that you can create a new attack object definition, you must follow certain steps. Given the steps in the exhibit, assume you have acquired...

If the power is lost to an IDP sensor, which feature allows the traffic to continue to flow through the device?

You implement Traffic Anomaly detection and you find numerous alerts of port scans from your security auditing team that you want to ignore. You create an address book entry for th...

Which three actions should be taken on a rule in the IDP rule base when the sensor is in transparent mode? (Choose three.)

What contains instructions on how the sensor should decode protocols?

In the exhibit, which command would have produced this output?

What is the function of Terminate Match?

When creating a new signature-based attack object, which four components must be specified? (Choose four.)

Which OSI layer(s) of a packet does the IDP sensor examine?

When configuring a honeypot rule, which three fields must you specify? (Choose three.)

Which statement is true about packet capture in the IDP sensor?

Which sensor utility is used to decode the contexts of a sequence of packets? Juniper JN0-541 Exam

Which sensor command will capture packets on a particular interface?

What is the function of a compound attack object?

How does the IDP sensor emulate a honeypot?

Which two attack detection methods are unique to Juniper NetScreenIDP? (Choose two.)

Which three statements are true about Dynamic Groups? (Choose three.)

What is the default admin account password on the sensor?

How do you access the ACM interface on an IDP sensor?

In which two ways can you view the IP address of a sensor's eth0 interface? (Choose two.)

What is a TCP connect scan?

Which three devices support clustering? (Choose three.)

On a sensor in transparent mode, how many virtual circuits are assigned to a virtual router?

Which three columns can be seen in the Network View of the Enterprise Security Profiler? (Choose three.)

What does the action "close client" instruct the sensor to do?

Which three functions does the IDP sensor perform? (Choose three.)

Given the information in the exhibit. What is the proper order when fine tuning a policy?

What is the function of a dynamic attack object group?

Which two tasks can be performed using the ACM? (Choose two.)

When the action "close client" is performed by an IDP sensor on an FTP session, which message will be displayed to the client when using FTP on the command line?

You implement backdoor detection and you notice that an alert is generated each time an SSH session is established with the protected servers. What must you do to correct the situa...

Which interface does IDP use to communicate with Security Manager?

Within the SYN protector rule base, what is the function of relay action?

In the exhibit, which rule base would have generated the log message? Juniper JN0-541 Exam

Assume that Enterprise Security Profiler (ESP) has already captured data for your network. You want to view traffic that does not match the following protocols: HTTP, HTTPS, DNS. W...

In the exhibit both firewalls are active/active, which two statements are true for this scenario? (Choose two.)

What is "the location of an attack pattern protocol stream"?

What does the action "drop packet" instruct the sensor to do?

What is "a signature or protocol anomaly combined with context information"?

In order to obtain attack information so that you can create a new attack object definition, you must follow certain steps. Given the steps displayed in the exhibit, assume you hav...

Which two statements are true? (Choose two.)

You want Enterprise Security Profiler (ESP) to generate a message when a new host is detected on a network. Which two steps must you perform? (Choose two.)

In the exhibit, which SYN protector mode is the IDP using?

How can you monitor real-time IP flows through the IDP sensor? Juniper JN0-541 Exam

If an IDP sensor finds that a packet matchesa particular IDP rule, and then finds a matching exempt rule, what does the sensor do?

Which two tasks can be performed using the ACM? (Choose two.)