Configure, Monitor, or Troubleshoot Juniper ATP Cloud JN0-336 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security analyst is investigating a false negative in ATP Cloud. A file that is known to be malicious was submitted and received a 'benign' verdict. The analyst has reviewed the file's behavior in the dashboard and found that the file was analyzed using static analysis only. Which action should the analyst take to improve the chances of detecting this file in the future?

   • AContact Juniper support to report the false negative.
   • BSubmit the file to the ATP Cloud sandbox for dynamic analysis.
   • CChange the action profile to 'block' to ensure the file is blocked in the future.
   • DCheck the SRX's policy to ensure the file is being submitted for analysis.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An organization has configured ATP Cloud inspection on their SRX Series firewall. After a recent policy change, users report that files are no longer being blocked even when ATP Cloud returns a 'malicious' verdict. The administrator verifies that the ATP Cloud service is reachable and that the security policy is still enabled. Which configuration should the administrator check first?

   • AThe action profile associated with the ATP Cloud policy rule.
   • BThe SRX's routing table to ensure the next hop to ATP Cloud is still valid.
   • CThe DNS settings on the SRX to ensure the ATP Cloud hostname resolves correctly.
   • DThe interface MTU settings to ensure large files can be transmitted.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An administrator has configured an SRX Series device to connect to Juniper ATP Cloud. The 'show security dynamic-address' command displays the ATP Cloud feed as 'unavailable'. The administrator verifies that the SRX has a default route to the internet and that DNS resolution works. Which next step should the administrator take to troubleshoot this issue?

   • AVerify that the SRX can reach the ATP Cloud API endpoint on TCP port 443.
   • BReboot the SRX to force a re-registration with the ATP Cloud service.
   • CConfirm that the ATP Cloud license is installed and valid on the SRX.
   • DCheck the SRX's clock and timezone settings for accuracy.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What type of information would you find in Juniper ATP Cloud reports?

   • ADetailed analysis of file verdicts and threat detections over a period of time
   • BBilling and usage information for the ATP Cloud subscription
   • CConfiguration changes made by administrators on the SRX device
   • DReal-time packet captures of network traffic
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A security analyst is using the ATP Cloud dashboard to investigate a potential breach. The analyst notices that the dashboard shows a large number of 'benign' verdicts for files that were submitted from a specific SRX device. The analyst suspects that the SRX is not properly configured to inspect all traffic. Which dashboard feature should the analyst use to investigate this?

   • AThe 'Administration' page, which shows device registration details.
   • BThe 'File Activity' report, which shows all files submitted and their verdicts.
   • CThe 'System Health' dashboard, which shows the status of the ATP Cloud service.
   • DThe 'Threats' report, which shows only malicious files.
   Reveal Solution Discussion Select an answer first