JN0-696最も有効な質問と解答で勉強

本番と同じ緊張感の中で時間配分を試せるかどうかが、Juniper Security Support, Professional (JNCSP-SEC)の仕上がりを左右します。Tech4ExamのテストエンジンはJN0-696本試験の環境を再現し、36問の練習問題を模擬試験形式で繰り返し解けます。

Juniper JN0-696 試験概要:

Juniper JN0-696 試験シラバストピック:

JN0-696試験のQ&A – 受験前に知っておきたいこと

Juniper Security Support, Professional (JNCSP-SEC) 認定 JN0-696 試験問題：

問題 #1

While attempting to set up IDP on an SRX Series device, the IDP attack database fails to download.
What is one reason for this behavior?

A. The host inbound traffic has not been configured correctly.
B. A firewall filter applied to the loopback interface is preventing the download of the attack database.
C. The device's configuration does not include the URL from which to retrieve the attack database.
D. The device's Untrust zone to Trust zone security policy does not allow this traffic.

問題 #2

In preparation for future expansion, a user decides to configure a stand-alone SRX Series device for chassis-clustering mode. The user enters the command set chassis cluster cluster-id 0 node 0 reboot on the device. After the device reboots, the user sees this output:
user@host> show chassis cluster status
error: Chassis cluster is not enabled.
user@host>
The device does not enter chassis-clustering mode.
What is the problem?

A. An SRX Series device will only enter chassis-clustering mode when it finds a peer that is also configured for chassis-clustering mode.
B. Cluster ID 0 is not valid for a chassis cluster.
C. Node ID 0 is not valid for a chassis cluster.
D. An SRX Series device will not enter chassis-clustering mode unless the fxp0 and fxp1 interfaces are defined in the configuration.

問題 #3

When attempting to delete IDP policies and configurations from an SRX Series device, a user enters these configuration commands:
Delete security idp
Commit
However, after the commit has completed, the configuration is still present under the [edit security idp] hierarchy.
What should the user do to permanently remove the configuration?

A. Delete the /var/db/scripts/commit/templates.xsl file and reboot the device.
B. Delete the [edit security idp] hierarchy, commit the change, and immediately reboot the device.
C. Stop the idpd process using the set system processes idp-policy disable configuration command, commit the change, delete the [edit security idp] hierarchy, and then commit that change.
D. Delete the IDP templates commit script from the [edit system scripts commit] hierarchy, delete the [edit security idp] hierarchy, and then commit the change.

問題 #4

-- Exhibit -
[edit security utm]
user@host# show
custom-objects { url-pattern { blocklist { value [ http://badsite.com http://blocksite.com ]; } acceptlist { value http://juniper.net; } } custom-url-category { blacklist { value blocklist; } whitelist { value acceptlist; } }
}
feature-profile { web-filtering { url-whitelist whitelist; url-blacklist blacklist; type juniper-local; juniper-local {
profile web-filter {
custom-block-message "Site is not allowed";
fallback-settings {
default log-and-permit;
}
}
}
}
}
utm-policy utm1 {
web-filtering {
http-profile web-filter;
}
}
-- Exhibit --
Click the Exhibit button.
You set up Web filtering to allow employees to only access your internal website. You notice that employees are still able to reach websites outside of the blacklists.
Referring the exhibit, which parameter must be changed?

A. You must define all sites you want to block using the protocol-command parameter.
B. You must define all sites you want to block using the mime-pattern parameter.
C. You must use integrated or redirect Web filtering instead of local list filtering.
D. You must change the fallback-settings parameter to default block.

解説：