Components JN0-336 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is planning to deploy ATP Cloud but has a policy that sensitive files must not leave the country. They want to use ATP Cloud for threat detection. What is the best way to comply with this policy?

   • ADisable file inspection for sensitive files and rely on local antivirus
   • BUse an ATP Cloud regional service located in the same country to ensure data residency
   • CUse a private ATP Cloud instance hosted on-premises
   • DEncrypt all files before sending them to ATP Cloud
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In the Juniper ATP Cloud architecture, what is the primary role of the SRX Series firewall?

   • ATo forward suspicious files to ATP Cloud and enforce the returned verdicts
   • BTo host the ATP Cloud management interface
   • CTo store all threat intelligence feeds for ATP Cloud
   • DTo replace the need for ATP Cloud by performing all sandboxing locally
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company runs an SRX Series firewall at each branch office. They want to detect zero-day malware downloads before files reach end users, but they do not want to redirect all traffic to a cloud proxy. Which ATP Cloud component should they enable on the SRX to inspect files inline while keeping the SRX as the enforcement point?

   • AJuniper Mist AI to apply machine learning to network traffic and block malicious files
   • BJuniper Secure Analytics (JSA) to collect and analyze all traffic logs for malware patterns
   • CJuniper Sky ATP connector installed on each endpoint to intercept downloads locally
   • DJuniper ATP Cloud inline inspection with policy-based redirection of specific file downloads to the cloud sandbox
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A network architect is designing a security solution and wants to use ATP Cloud to detect zero-day threats. Which component of ATP Cloud is specifically responsible for executing files in a controlled environment to observe their behavior?

   • AThe sandboxing service
   • BThe management portal
   • CThe threat intelligence feed
   • DThe SRX firewall's IDP engine
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security team is evaluating ATP Cloud's effectiveness. They notice that some files are not being sent to the sandbox because the SRX is configured to only send files above a certain size. The team wants to ensure that all potentially malicious files are analyzed, but they are concerned about performance impact. What is the best approach?

   • ADisable the file size limit and send all files to the sandbox
   • BUse the SRX's local antivirus to analyze smaller files instead
   • CKeep the current threshold and rely on the threat intelligence feed for smaller files
   • DLower the file size threshold to send more files, and monitor the impact on SRX performance
   Reveal Solution Discussion Select an answer first