Screens JN0-232 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In Junos OS, what is the primary purpose of a screen object?

   • ATo encrypt traffic between two sites over the internet
   • BTo inspect traffic for known attack patterns and take predefined actions when detected
   • CTo route traffic between different security zones based on policy
   • DTo define which users can access the security device for management
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A network administrator is configuring a Junos OS security device to protect the internal network from common reconnaissance and flood attacks. The administrator has created a screen object named 'protect-internal' with appropriate thresholds. Which additional configuration step is required to ensure the screen is actually applied to traffic entering the internal zone?

   • ABind the screen object to the internal interface using the 'set interfaces ge-0/0/1 screen' command.
   • BEnable the screen object globally using the 'set security screen global protect-internal' command.
   • CReference the screen object in a security policy that permits traffic to the internal zone.
   • DApply the screen object to the security zone that contains the internal network interfaces.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How does a timeout affect screen detection?

   • AIt specifies the time window during which events are counted for threshold evaluation
   • BIt sets the duration for which the screen remains enabled
   • CIt defines how long the screen waits before applying the action after an attack is detected
   • DIt determines how long a dropped packet is held in the buffer
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An administrator is tuning the screen settings to reduce false positives for a port scan detection. The current configuration triggers an alarm when a source sends packets to more than 10 different destination ports within 5 seconds. The administrator wants to allow more scanning behavior before triggering. What should the administrator adjust?

   • ADecrease the timeout from 5 seconds to 2 seconds.
   • BApply the screen to a different zone.
   • CChange the action from 'alarm' to 'drop'.
   • DIncrease the port scan threshold from 10 to a higher value.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security administrator is configuring a screen to handle a suspected IP spoofing attack. The administrator wants to silently drop the spoofed packets without sending any response to the source. Which action should be configured?

   • Aalarm
   • Bpermit
   • Cdrop
   • Dreject
   Reveal Solution Discussion Select an answer first