Workflow JN0-336 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security administrator wants to ensure that files downloaded over HTTPS are inspected by ATP Cloud. The current configuration only redirects HTTP traffic. What must be done to include HTTPS traffic?

   • AConfigure the SRX to forward all HTTPS traffic to a proxy server.
   • BEnable the 'inspect-https' option in the ATP Cloud profile.
   • CAdd HTTPS to the redirect profile and ensure the SRX can decrypt SSL/TLS traffic.
   • DChange the security policy action to 'permit' for HTTPS traffic.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A network administrator is integrating Juniper ATP Cloud with an SRX Series device. After configuring the ATP Cloud subscription and enabling the feature, the administrator notices that the SRX is not sending any traffic to ATP Cloud. The security policy is correctly configured with the ATP Cloud profile. What is the most likely missing step?

   • AThe SRX must have a route to the internet via a management interface.
   • BThe SRX must have a DNS server configured to resolve the ATP Cloud FQDN.
   • CThe security policy must have an application override to 'junos:http' for all traffic.
   • DThe SRX must be registered with the ATP Cloud tenant using the activation code.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the role of the ATP Cloud sandbox in the inspection process?

   • ATo execute files in a controlled environment and observe their behavior
   • BTo block malicious files at the SRX
   • CTo store files for later analysis
   • DTo provide a list of known malicious IP addresses
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which protocol is used for communication between the SRX Series device and ATP Cloud during integration?

   • AHTTPS
   • BTelnet
   • CSNMP
   • DFTP
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security analyst is reviewing ATP Cloud reports and notices that a file was submitted for sandboxing and received a 'benign' verdict. However, the analyst suspects the file might be malicious because it exhibited suspicious behavior. What is the most appropriate next step in the ATP Cloud workflow?

   • ADisable sandboxing for that file type to prevent false negatives.
   • BOverride the verdict in the ATP Cloud policy to block the file.
   • CWait for the ATP Cloud threat intelligence feed to update automatically.
   • DManually submit the file to ATP Cloud for a second opinion.
   Reveal Solution Discussion Select an answer first