A company has a proprietary protocol that is not covered by the default IDP signatures. The security team needs to detect a specific command injection attempt in this protocol. The administrator needs to create a custom attack object. What is the first step the administrator should take?

Enable anomaly detection for the proprietary protocol

Create a custom signature that matches the command injection pattern

Update the IDP database to include the proprietary protocol

Create a custom attack object group and add the signature to it

A security administrator is planning to deploy IDP on a new SRX device. The administrator wants to ensure that the device has the latest attack definitions before enabling IDP. What should the administrator do?

Create custom attack objects for all known threats

Configure the IDP policy to use the recommended attack object group

Download and install the latest IDP signature package

Enable IDP and rely on the default attack database

Which command is used to check the current version of the IDP database on a Junos device?

show security idp security-package-version

show configuration security idp

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 1Objective 1

IDP Database Management JN0-336 Practice Questions (Page 6)

Part of the Intrusion Detection and Prevention (IDP) domain, which makes up ~10% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

8concepts

Questions 26–30

26application · medium
A company has a proprietary protocol that is not covered by the default IDP signatures. The security team needs to detect a specific command injection attempt in this protocol. The administrator needs to create a custom attack object. What is the first step the administrator should take?
Select an answer first
27foundation · easy
Which attack object category is used to detect deviations from normal network behavior?
Select an answer first
28application · easy
A security administrator is planning to deploy IDP on a new SRX device. The administrator wants to ensure that the device has the latest attack definitions before enabling IDP. What should the administrator do?
Select an answer first
29application · medium
A security analyst is reviewing IDP attack objects and needs to classify a new object that detects a sequence of packets that together form an attack, but each packet individually is benign. Which category of attack object should the analyst use?
Select an answer first
30foundation · easy
Which command is used to check the current version of the IDP database on a Junos device?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.

IDP Database Management JN0-336 Practice Questions (Page 6)

Questions 26–30

A company has a proprietary protocol that is not covered by the default IDP signatures. The security team needs to detect a specific command injection attempt in this protocol. The administrator needs to create a custom attack object. What is the first step the administrator should take?

Which attack object category is used to detect deviations from normal network behavior?

A security administrator is planning to deploy IDP on a new SRX device. The administrator wants to ensure that the device has the latest attack definitions before enabling IDP. What should the administrator do?

A security analyst is reviewing IDP attack objects and needs to classify a new object that detects a sequence of packets that together form an attack, but each packet individually is benign. Which category of attack object should the analyst use?

Which command is used to check the current version of the IDP database on a Junos device?

Keep studying — Intrusion Detection and Prevention (IDP)