Audit Logs JN0-253 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security analyst needs to find all audit log entries related to changes made by a specific administrator account 'jdoe' during the last 24 hours. The analyst is currently on the Audit Logs page in the Mist portal. What is the most efficient way to narrow down the results?

   • AUse the search bar to type 'jdoe' and then sort by date.
   • BUse the filter options to set the time range to 'Last 24 hours' and enter 'jdoe' in the user filter field.
   • CExport the audit log to CSV and then use a spreadsheet to filter by user.
   • DScroll through the entire audit log manually to find entries from the last 24 hours.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of audit logs in Juniper Mist?

   • ATo automatically back up configuration files
   • BTo track administrative and system actions for security and compliance
   • CTo provide real-time alerts for network anomalies
   • DTo store network traffic data for performance analysis
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A security team is investigating a potential unauthorized change to a network policy. They have identified a suspicious audit log entry but need to see all actions performed by the same user around that time to understand the full scope. The audit log contains thousands of entries. What is the most efficient approach?

   • AFilter by the action type 'Update' to see all changes.
   • BExport the entire audit log and search it in a spreadsheet.
   • CFilter the audit log by the user and a time range around the suspicious entry.
   • DUse the search bar to type the user's name and review all results.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Where in the Juniper Mist portal would you navigate to view audit logs?

   • AInsights > WLAN
   • BAdmin > Users
   • CNetwork > Access Points
   • DOrganization > Audit Logs
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   An audit log entry shows 'User: admin5, Action: Login, Resource: Portal, Timestamp: 2024-03-15 08:00:00 UTC' and another entry shows 'User: admin5, Action: Update, Resource: WLAN profile 'Guest', Timestamp: 2024-03-15 08:05:00 UTC'. What can be inferred from these entries?

   • Aadmin5 logged in twice and made no changes.
   • Badmin5 logged in and then made a change to the Guest WLAN profile.
   • Cadmin5 attempted to log in but failed.
   • Dadmin5 made a change and then logged out.
   Reveal Solution Discussion Select an answer first