What is the primary purpose of security monitoring in an enterprise network?

To replace the need for security policies

To track security events and identify potential threats

A security administrator is configuring an SRX to mitigate a SYN flood attack. The attack is causing the firewall to exhaust its session table. The administrator wants to ensure that legitimate connections are still established while malicious traffic is dropped. Which configuration is most effective?

Increase the session table size.

Set a low SYN flood threshold in screen options.

A company's SRX Series firewall is configured with a security policy that permits HTTP traffic from the internal zone to the external zone. The security team has identified a new botnet that uses HTTP to communicate with its command-and-control server. The team wants to block this traffic without disrupting legitimate web browsing. Which configuration change should be made?

Create a custom IDP rule that matches the botnet's signature and apply it to the existing HTTP policy.

Add a new security policy that denies all traffic from the internal zone to the external zone.

Change the action of the existing HTTP policy from 'permit' to 'deny'.

Configure a static route to send all HTTP traffic to a null interface.

Juniper NetworksCertified Professional, Security (JNCIP-SEC)

Domain 8Objective 2

Secure Enterprise JN0-637 Practice Questions (Page 2)

Part of the Automated Threat Mitigation domain, which makes up ~7% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~2–4 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

6concepts

Questions 6–10

6foundation · easy
What is the primary purpose of security monitoring in an enterprise network?
Select an answer first
7foundation · easy
Which automated threat mitigation technique is used to block traffic from a specific source IP address that is identified as malicious?
Select an answer first
8foundation · easy
Which architectural element in a secure enterprise network is used to define the rules that determine which traffic is allowed or denied between different network zones?
Select an answer first
9expert · hard
A security administrator is configuring an SRX to mitigate a SYN flood attack. The attack is causing the firewall to exhaust its session table. The administrator wants to ensure that legitimate connections are still established while malicious traffic is dropped. Which configuration is most effective?
Select an answer first
10application · medium
A company's SRX Series firewall is configured with a security policy that permits HTTP traffic from the internal zone to the external zone. The security team has identified a new botnet that uses HTTP to communicate with its command-and-control server. The team wants to block this traffic without disrupting legitimate web browsing. Which configuration change should be made?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-637

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-637” is a trademark of its owner, used for identification only.

Secure Enterprise JN0-637 Practice Questions (Page 2)

Questions 6–10

What is the primary purpose of security monitoring in an enterprise network?

Which automated threat mitigation technique is used to block traffic from a specific source IP address that is identified as malicious?

Which architectural element in a secure enterprise network is used to define the rules that determine which traffic is allowed or denied between different network zones?

Keep studying — Automated Threat Mitigation