IDP Database Management JN0-336 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which method can be used to update the IDP database on a Juniper device?

   • ABy clearing the IDP logs
   • BBy changing the security policy
   • CBy restarting the device
   • DManually downloading and installing the update package
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How can attack object groups be used in an IDP policy?

   • ATo define the order in which attack objects are evaluated
   • BTo automatically generate reports on attacks in the group
   • CAs a match condition to trigger an action for any attack in the group
   • DTo exclude certain attack objects from detection
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security analyst needs to detect a known exploit that sends a specific byte sequence in the first packet of a TCP connection. The sequence is always the same and does not depend on any prior traffic. The analyst wants to minimize false positives while ensuring the detection works reliably. Which approach should the analyst take?

   • ACreate a compound attack object that combines the byte sequence with a port match
   • BCreate a stateful signature that matches the byte sequence only in the first packet of a TCP connection
   • CCreate an anomaly attack object that flags any TCP connection with an unusual first packet
   • DCreate a stateless signature that matches the byte sequence in any TCP packet
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A security administrator is tuning IDP signatures to reduce false positives. A signature that detects a specific exploit is triggering on legitimate traffic that contains the same byte pattern. The administrator wants to reduce false positives without missing the exploit. Which approach is most effective?

   • ADisable the signature and rely on anomaly detection
   • BIncrease the signature's severity to make it more sensitive
   • CChange the signature from stateful to stateless
   • DAdd a context to the signature to require the pattern to appear in a specific protocol field
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Why is it important to regularly update the IDP database?

   • ATo change the default security policy
   • BTo improve the performance of the IDP engine
   • CTo reduce false positives
   • DTo ensure the IDP can detect the latest threats
   Reveal Solution Discussion Select an answer first