Workflow JN0-336 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is deploying ATP Cloud for the first time. The security team wants to understand the flow of traffic from the user's device to the cloud and back. Which statement accurately describes the ATP Cloud workflow?

   • AATP Cloud inspects all traffic in real-time and blocks malicious traffic before it reaches the SRX.
   • BThe SRX sends a copy of the file to ATP Cloud, which analyzes it and returns a verdict; the SRX then enforces the action based on the verdict.
   • CThe SRX blocks all traffic and only allows files that have been pre-approved by ATP Cloud.
   • DThe user's device sends traffic directly to ATP Cloud, which then forwards it to the destination.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security architect is designing an ATP Cloud deployment for a multi-site organization. The organization has a central security operations center (SOC) that wants to monitor threats across all sites. Which approach best supports centralized monitoring?

   • AUse a single ATP Cloud tenant for all sites and configure the SRX devices to report to that tenant.
   • BUse a third-party SIEM to collect logs from each SRX and forward them to ATP Cloud.
   • CDeploy ATP Cloud on-premises at each site and aggregate logs at the SOC.
   • DDeploy a separate ATP Cloud tenant for each site and have the SOC log into each tenant.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which component in the ATP Cloud workflow is responsible for collecting and forwarding suspicious files to the cloud for analysis?

   • AJuniper Security Director
   • BThe ATP Cloud sandbox
   • CThe SRX Series device
   • DJuniper Mist
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is a common remediation action for a threat identified in an ATP Cloud report?

   • AUpdating the SRX firmware
   • BRestarting the SRX device
   • CDisabling the security policy
   • DAdding the malicious file hash to a block list
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is integrating ATP Cloud with its SRX devices. The security team wants to ensure that all traffic is inspected, but they are concerned about the performance impact of SSL decryption. They decide to only decrypt traffic to specific high-risk destinations. Which configuration approach should be used?

   • AUse a custom SSL decryption profile that includes only the high-risk destinations.
   • BConfigure the SRX to forward all traffic to an external SSL decryption appliance.
   • CConfigure SSL decryption for all traffic and rely on ATP Cloud to filter.
   • DDisable SSL decryption and only inspect HTTP traffic.
   Reveal Solution Discussion Select an answer first