JN0-541 Exam Questions

Which statement is NOT true?

In which three situations would you create a compound attack object? (Choose three.)

When you have two IDP sensors in a cluster, and the sensors are using external HA, which three devices will be performing the failure detection and failover execution? (Choose thre...

What contains instructions on how the sensor should decode protocols?

Which sensor process records unique network activity at layers 3, 4, and 7?

Given the following steps:

In the Enterprise Security Profiler, what would you define under Permitted Objects?

What two statements are true about the attack object database update process? (Choose two.)

Which three actions should be taken on a rule in the IDP rule base when the sensor is in transparent mode? (Choose three.)

In the exhibit, which sensor command would have produced this display?

Which sensor utility will replay pcap files?

In a packet, which three must match an IDP rule before an action is performed on that packet or connection? (Choose three.)

You have a rule in your IDP policy that detects all HTTP signatures that are targeted towards your Web server. You notice a log message is generated each time a Web user accesses t...

Which two statements about Log Viewer filters are true? (Choose two)

When Address Resolution is enabled in the Log Viewer, which machine is responsible for performing the DNS Lookups?

You have a false positive in the Log Viewer that you want to exclude from further detection. What should you do?

Which statement is true about log suppression?

Which two statements about disk management on the IDP Sensor are true?

Which two statements are true about packet logging? (Choose two.)

In which three fields does Log Investigator allow you to create reports and view logs? (Choose three.)

Which statement is true about Packet Logging in IDP?

Log Investigator identified26 attacks from a specific source to a specific destination. How can you view the details of these 26 attacks?

Which three statements about the ESP are true? (Choose three.)

What information is provided by the host table (Choose three.)

Which two does ESP use to help identify applications running on certain hosts? (Choose two.)

What is a Violation Object in ESP?

On which three fields can ESP filter data? (Choose three.) Juniper JN0-541 Exam

You want ESP to alert on abnormal activities in a network. Which two actions should you take to accomplish this? (Choose two.)

Which three columns can be seen in the Application view of Profiler? (Choose three.)

Which two statements about ESP are true? (Choose two.)

Which command from the IDP Sensor CLI can be used to display the sensor statistics, the policy information, and mode of sensor deployment?

Which two statements are true concerning the licensing of IDP Sensors? (Choose two.)

What should you do to purge logs for certain days from your IDP Management Server?

Juniper JN0-541 Exam Which two types of reports can be created? (Choose two.)

Which two statements are true about quick reports? (Choose two.)

Which statement is true about the NetScreen IDP Closed Loop Investigation (CLI)?

Which columns are available for creating time-based report?

Which statement is true about exporting reports?

Which layers of the OSI Model does IDP look into when inspecting a packet?

What are two limitations of traditional IDS systems? (Choose two.)

Which method of detection does IDP Sensor use to detect attacks against a fake system on the network?

Which method of detection does IDP Sensor use to detect rootkits or Trojans present on internal systems?

Which method of detection does IDP Sensor use to detect a network scan or portscan?

Which two statements are true about Trojans? (Choose two.)

What are three functions of the IDP Management Server? (Choose three.)

What is a buffer overflow attack?

Which statements are true about the IDP Management Server? (Choose two.)

Juniper JN0-541 Exam Which IDP Sensors support the NetScreen IDP bypass unit? (Choose two.)

On which two operating systems can the IDP Management Server be installed? (Choose two.)

Which command verifies the IDP Management Server process?