Configure, Monitor, or Troubleshoot IDP JN0-336 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security administrator is monitoring IDP events and notices that a specific attack is being detected repeatedly, but the action is set to 'recommend'. They want to change the action to 'drop' for this specific attack to automatically block it. What should they do?

   • AChange the global IDP action to 'drop'.
   • BDisable the 'recommend' action and enable 'drop' in the IDP policy settings.
   • CModify the IDP rule that matches this attack and change the action to 'drop'.
   • DCreate a new security policy to drop the traffic.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company is deploying a new IDP policy on their SRX to protect their internal network. They want to ensure that the policy is active and inspecting traffic. Which command should they use to verify that the IDP policy is correctly applied and active?

   • Ashow security idp policy
   • Bshow security idp attack-table
   • Cshow security idp counters
   • Dshow security policies
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A network administrator is troubleshooting why IDP is not detecting a known attack that is being sent in fragmented packets. The IDP policy is correctly applied, and the signature database is up to date. What is the most likely reason for the missed detection?

   • AThe IDP is configured to skip fragmented packets.
   • BThe attack is using a non-standard port that is not in the IDP policy.
   • CThe IDP is in passive mode and cannot detect fragmented attacks.
   • DThe attack is encrypted and IDP cannot inspect it.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A network engineer is monitoring IDP events on their SRX and wants to see real-time statistics about the number of packets inspected and the number of attacks detected. Which command should they use?

   • Ashow security idp attack-table
   • Bshow security idp statistics
   • Cshow log idp
   • Dshow security idp policy
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A network engineer is troubleshooting why IDP is not detecting attacks on a specific server. The IDP policy is correctly applied, and the signature database is up to date. They have verified that the traffic is being inspected. What should they check next?

   • AVerify that the server's IP address is not excluded from IDP inspection.
   • BCheck if the server is in a different zone that has a different IDP policy.
   • CConfirm that the attack group is enabled for that server.
   • DEnsure that the IDP sensor is enabled for that server.
   Reveal Solution Discussion Select an answer first