What is the purpose of the default security policy in Junos OS?

To provide a template for creating new policies.

To permit all traffic that does not match any user-defined policy.

To deny all traffic that does not match any user-defined policy.

To log all traffic that does not match any user-defined policy.

Which Junos OS feature identifies applications by inspecting packet payloads rather than relying solely on port numbers?

Application identification (AppID)

Which two elements are required to define a security policy in Junos OS?

Application, user, and a deny action

Interface, VLAN, and a permit action

Source IP, destination IP, and a log setting

From zone, to zone, and a policy action

What is the difference between the 'deny' and 'reject' actions in a Junos OS security policy?

Deny is used for TCP traffic; reject is used for UDP traffic.

Deny sends a TCP RST; reject drops the packet silently.

Deny drops the packet silently; reject sends a TCP RST or ICMP unreachable message.

Deny requires logging; reject does not.

A company runs a proprietary application that uses a custom TCP protocol on port 8443. The application's traffic is currently permitted by a broad 'permit any' policy, but the security team wants to restrict it to only the specific application traffic. They create a custom application object with protocol TCP and destination port 8443. Which additional configuration is required for the custom application to match the traffic correctly?

Reference the custom application in the policy's application match condition and ensure the policy is placed before any broader permit policy.

Configure the custom application with a signature that identifies the application's unique payload pattern.

Create a second custom application for the return traffic on port 8443 and reference both in the policy.

Enable application identification (AppID) on the security policy so the custom application can be matched.

Juniper NetworksCertified Specialist, Data Center (JNCIS-DC)

Domain 6Objective 5

Security Policies JN0-481 Practice Questions (Page 2)

Part of the Data Center Multitenancy domain, which makes up ~20% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 11 practice questions to prepare you well beyond it. (estimate)

11questions here

3free pages

6concepts

Questions 6–10

6foundation · easy
What is the purpose of the default security policy in Junos OS?
Select an answer first
7foundation · easy
Which Junos OS feature identifies applications by inspecting packet payloads rather than relying solely on port numbers?
Select an answer first
8foundation · easy
Which two elements are required to define a security policy in Junos OS?
Select an answer first
9foundation · easy
What is the difference between the 'deny' and 'reject' actions in a Junos OS security policy?
Select an answer first
10application · medium
A company runs a proprietary application that uses a custom TCP protocol on port 8443. The application's traffic is currently permitted by a broad 'permit any' policy, but the security team wants to restrict it to only the specific application traffic. They create a custom application object with protocol TCP and destination port 8443. Which additional configuration is required for the custom application to match the traffic correctly?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-481

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-481” is a trademark of its owner, used for identification only.