Security Profiles JN0-637 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   An administrator configures a security profile with an IDP policy to block SQL injection attempts. The profile is applied to a policy in a tenant system. During testing, SQL injection attempts are not being blocked. The IDP logs show no alerts. What is the most likely cause?

   • AThe IDP policy is not attached to the security profile; it is only defined but not referenced.
   • BThe default security profile is overriding the custom profile's IDP settings.
   • CThe security profile is applied to the wrong policy, so it is not inspecting the traffic.
   • DThe tenant system does not support IDP policies.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the purpose of including ALGs in a security profile?

   • ATo allow the firewall to properly handle protocols that embed IP addresses or ports in the payload
   • BTo enable deep packet inspection for malware detection
   • CTo filter traffic based on source and destination IP addresses
   • DTo provide encryption for data in transit
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What happens when a security profile is overridden in a tenant system?

   • AThe override is applied only to the root logical system
   • BThe tenant system uses the override profile instead of the inherited one
   • CThe override is ignored and the inherited profile remains in effect
   • DThe override merges with the inherited profile, combining all settings
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security administrator is configuring a security profile for a tenant that handles DNS and SMTP traffic. The profile must ensure that DNS queries are protected against cache poisoning and that SMTP traffic is inspected for protocol compliance. Which components should be included?

   • AEnable the DNS ALG and configure screen options for DNS cache poisoning protection.
   • BEnable both DNS and SMTP ALGs and disable screen options.
   • CConfigure screen options for both DNS and SMTP and enable IDP.
   • DEnable the SMTP ALG and configure an IDP policy for DNS.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In the context of Junos logical systems and tenant systems, what is the primary role of a security profile?

   • ATo group security-related settings and apply them consistently to enforce security policies
   • BTo allocate CPU and memory resources for tenant systems
   • CTo define the routing table instances and forwarding options for a logical system
   • DTo manage user authentication and administrative access to the device
   Reveal Solution Discussion Select an answer first