DNS and IoT Security JN0-336 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company has a mix of managed and unmanaged devices on its network. They want to use DNS sinkholing to block access to a newly discovered malicious domain, but they are concerned that some users might try to bypass the sinkhole by using external DNS servers. What is the most effective way to prevent this bypass while still using DNS sinkholing?

   • AConfigure the DNS security policy to block the malicious domain for all users
   • BConfigure the firewall to block outbound DNS traffic to any server other than the designated DNS server
   • CUse a security policy that quarantines any device that queries the malicious domain
   • DEnable DNS logging to identify users who bypass the sinkhole
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is deploying a large number of IoT devices that use a variety of protocols, some of which are proprietary. The security team wants to use Juniper ATP Cloud to protect these devices. What is the primary challenge they will face?

   • AThe devices may not support standard security agents, so behavioral analysis is needed
   • BThe devices will require firmware updates to be compatible with ATP Cloud
   • CThe devices will generate too much traffic for ATP Cloud to handle
   • DThe devices will not be able to communicate with ATP Cloud
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A network administrator is investigating a malware infection that uses DNS to communicate with a command-and-control server. They want to identify all infected hosts by looking at DNS logs. What is the most effective way to do this using Juniper ATP Cloud?

   • AReview firewall logs for all outbound traffic
   • BReview endpoint antivirus logs
   • CReview intrusion prevention system (IPS) alerts
   • DReview DNS security logs for queries to the known malicious domain
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A manufacturing company has deployed a new model of smart sensors on the production floor. The security team wants to use Juniper ATP Cloud to detect if these sensors start behaving abnormally. What is the first step they should take to enable behavioral anomaly detection for these devices?

   • ACreate a baseline of normal behavior for the sensors
   • BEnable threat intelligence feeds for the sensors
   • CApply a strict security policy that blocks all traffic from the sensors
   • DConfigure the sensors to send logs to a SIEM
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which action can be enforced by an IoT security policy in Juniper ATP Cloud?

   • AInstalling new applications on the device
   • BRebooting the device remotely
   • CBlocking network access for a device that violates policy
   • DChanging the device's hardware configuration
   Reveal Solution Discussion Select an answer first