Antispam JN0-232 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   An organization is using antispam on their SRX with a quarantine action. The security team wants to reduce the administrative burden of reviewing quarantined messages while still allowing users to self-service release false positives. What should they configure?

   • AChange the action to tag instead of quarantine
   • BConfigure the quarantine to automatically release messages after a certain time
   • CEnable user notifications for quarantined messages and provide a self-service release mechanism
   • DDisable notifications and have users check the quarantine log manually
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An administrator has enabled antispam on an SRX but notices that no spam is being detected. The administrator has verified that the feature is enabled and the policy is applied. What should the administrator check next?

   • AVerify that the antispam signature database is up to date
   • BCheck the firewall logs for blocked traffic
   • CReboot the SRX to reset the antispam engine
   • DIncrease the spam threshold to catch more messages
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A network administrator is reviewing antispam logs on an SRX and notices that a particular spam campaign is consistently evading detection. The messages have varied subject lines and content, but they all originate from a small set of IP addresses that have a poor reputation. Which spam detection technique would be most effective to catch these messages?

   • ABayesian filtering
   • BContent analysis
   • CReputation-based filtering
   • DHeuristic analysis
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which technique is commonly used by antispam systems to identify spam based on the sender's past behavior?

   • AReputation analysis
   • BHeuristic analysis
   • CContent analysis
   • DBayesian filtering
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An organization has a policy that all spam should be blocked for the finance department, but for the marketing department, spam should be tagged so they can review it. The SRX has antispam enabled globally. How should the administrator configure the antispam policies to meet this requirement?

   • ACreate one antispam policy for all traffic and set the action to tag
   • BDisable antispam for the marketing department and enable it for finance
   • CCreate two antispam policies: one for finance traffic with block action, and one for marketing traffic with tag action
   • DCreate one antispam policy for all traffic and set the action to block
   Reveal Solution Discussion Select an answer first