Which statement correctly describes the relationship between IDP rulebases and IDP policies on a Juniper device?

An IDP rulebase is a collection of policies, each containing rules that define detection and action.

An IDP policy and an IDP rulebase are two names for the same configuration object.

An IDP policy is a collection of rulebases, each containing rules that define detection and action.

An IDP rulebase is a set of attack objects, and an IDP policy is a set of rulebases.

A security team is troubleshooting why their IDP is not blocking a specific attack even though the policy is set to 'drop'. They have verified that the traffic is matching the rule and the action is 'drop'. What should they check next?

Verify that the IDP policy is applied to the correct security policy and zone.

Check if the attack is using a non-TCP protocol; IDP only drops TCP traffic.

Confirm that the IDP sensor is enabled on the data plane.

Ensure that the 'drop' action is supported in transparent mode.

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 1Objective 3

Configure, Monitor, or Troubleshoot IDP JN0-336 Practice Questions (Page 3)

Part of the Intrusion Detection and Prevention (IDP) domain, which makes up ~10% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

3concepts

Questions 11–15

11foundation · easy
Which statement correctly describes the relationship between IDP rulebases and IDP policies on a Juniper device?
Select an answer first
12foundation · easy
An administrator notices that a known attack is not being detected by IDP. Which configuration element should be checked first to ensure the attack is not being ignored?
Select an answer first
13application · medium
An administrator is configuring a new IDP policy on their SRX and wants to ensure that the policy is active immediately without rebooting the device. What should they do?
Select an answer first
14foundation · easy
Which log file on a Junos device contains records of IDP events that can be reviewed after detection?
Select an answer first
15expert · hard
A security team is troubleshooting why their IDP is not blocking a specific attack even though the policy is set to 'drop'. They have verified that the traffic is matching the rule and the action is 'drop'. What should they check next?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.

Configure, Monitor, or Troubleshoot IDP JN0-336 Practice Questions (Page 3)

Questions 11–15

Which statement correctly describes the relationship between IDP rulebases and IDP policies on a Juniper device?

An administrator notices that a known attack is not being detected by IDP. Which configuration element should be checked first to ensure the attack is not being ignored?

An administrator is configuring a new IDP policy on their SRX and wants to ensure that the policy is active immediately without rebooting the device. What should they do?

Which log file on a Junos device contains records of IDP events that can be reviewed after detection?

A security team is troubleshooting why their IDP is not blocking a specific attack even though the policy is set to 'drop'. They have verified that the traffic is matching the rule and the action is 'drop'. What should they check next?

Keep studying — Intrusion Detection and Prevention (IDP)