A large enterprise uses Juniper ATP Cloud with multiple SRX firewalls. They have a remediation policy that blocks any endpoint that communicates with a known malicious IP. However, they have a business-critical application that legitimately uses an IP that is occasionally flagged as malicious by threat intelligence. This causes the application to be blocked, disrupting operations. The security team needs to prevent this disruption while still protecting the network. What should they do?

Disable the remediation policy entirely

Create an exception policy for the business-critical application's IP address

Change the remediation action to 'alert' for all threats

Quarantine the business-critical application's server

During a security incident, ATP Cloud detects a threat and automatically blocks it at the SRX firewall. However, the security team later finds that the block was not effective because the threat used a different IP address. What is the likely reason for this?

The remediation policy was set to 'alert'

The SRX firewall was not properly configured

The remediation action was based on a static IP address that changed

ATP Cloud did not detect the threat

A security manager needs to prove to auditors that the organization is effectively responding to threats detected by ATP Cloud. Which set of data would provide the most comprehensive evidence?

A list of all blocked IP addresses

A report showing the number of threats detected, actions taken, and the time to remediation

What is the purpose of the 'alert' remediation action in Juniper ATP Cloud?

To delete the malicious file from the system

To quarantine the malicious file on the endpoint

To notify administrators about a detected threat without taking automatic action

To automatically block all traffic from the affected host

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 3Objective 4

Traffic Remediation JN0-336 Practice Questions (Page 6)

Part of the Juniper Advanced Threat Prevention (ATP) Cloud domain, which makes up ~31% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

6concepts

Questions 26–29

26expert · hard
A large enterprise uses Juniper ATP Cloud with multiple SRX firewalls. They have a remediation policy that blocks any endpoint that communicates with a known malicious IP. However, they have a business-critical application that legitimately uses an IP that is occasionally flagged as malicious by threat intelligence. This causes the application to be blocked, disrupting operations. The security team needs to prevent this disruption while still protecting the network. What should they do?
Select an answer first
27expert · hard
During a security incident, ATP Cloud detects a threat and automatically blocks it at the SRX firewall. However, the security team later finds that the block was not effective because the threat used a different IP address. What is the likely reason for this?
Select an answer first
28expert · hard
A security manager needs to prove to auditors that the organization is effectively responding to threats detected by ATP Cloud. Which set of data would provide the most comprehensive evidence?
Select an answer first
29foundation · easy
What is the purpose of the 'alert' remediation action in Juniper ATP Cloud?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.

Traffic Remediation JN0-336 Practice Questions (Page 6)

Questions 26–29

During a security incident, ATP Cloud detects a threat and automatically blocks it at the SRX firewall. However, the security team later finds that the block was not effective because the threat used a different IP address. What is the likely reason for this?

A security manager needs to prove to auditors that the organization is effectively responding to threats detected by ATP Cloud. Which set of data would provide the most comprehensive evidence?

What is the purpose of the 'alert' remediation action in Juniper ATP Cloud?

Keep studying — Juniper Advanced Threat Prevention (ATP) Cloud