Traffic Remediation JN0-336 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In Juniper ATP Cloud, what is the role of a remediation policy?

   • ATo manage user access to the ATP Cloud portal
   • BTo schedule regular security audits
   • CTo define which remediation action is taken for a detected threat
   • DTo configure the ATP Cloud server's network settings
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security analyst is documenting the remediation workflow for an incident where ATP Cloud detected a phishing email with a malicious link. What is the correct sequence of steps?

   • ADetection → Policy evaluation → Remediation action → Logging and reporting
   • BRemediation action → Detection → Policy evaluation → Reporting
   • CPolicy evaluation → Detection → Remediation action → Logging
   • DLogging → Detection → Policy evaluation → Remediation action
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   During a security incident, ATP Cloud detects a malicious file and automatically blocks it at the SRX firewall. What is the final step in the remediation workflow for this incident?

   • AThe threat is detected by ATP Cloud
   • BThe administrator manually reviews the incident
   • CThe remediation action is logged and reported
   • DThe endpoint is quarantined
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is a type of remediation action available in Juniper ATP Cloud?

   • AReboot
   • BEncrypt
   • CQuarantine
   • DPatch
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company's security team has deployed Juniper ATP Cloud to protect its network. They have identified a compromised endpoint that is attempting to communicate with a known command-and-control server. The team wants to prevent this specific communication without disrupting other traffic from the same endpoint. Which remediation action should they configure in the ATP Cloud policy?

   • ABlock the specific command-and-control IP address
   • BBlock all traffic from the compromised endpoint
   • CQuarantine the compromised endpoint
   • DGenerate an alert for the communication
   Reveal Solution Discussion Select an answer first