Which Junos command would you use to verify the current GBP policy configuration on a device?

show configuration security policies

An administrator is configuring GBP and needs to allow HTTPS traffic from the web ASG to the app ASG. Which configuration element is used to specify this traffic?

A tenant-level configuration that enables HTTPS globally

A vSRX firewall rule that allows HTTPS

An ASG-level configuration that permits HTTPS

A policy rule that defines the source ASG, destination ASG, and protocol/port

A company is implementing GBP and has a requirement to allow traffic between two ASGs only during business hours. What is the best way to achieve this?

Use a vSRX firewall rule with a time schedule

Create two policies, one for business hours and one for off-hours, and switch between them

Create a policy with a time-based rule that permits traffic during business hours

Create a policy that permits traffic and manually disable it outside business hours

A company is deploying GBP in a data center with multiple vSRX devices. The requirement is to ensure that policies are consistently enforced across all vSRX devices. What is the best approach?

Deploy a separate GBP controller for each vSRX

Use the vSRX's local configuration to define policies

Configure each vSRX individually with the same policies

Use a single GBP controller to manage all vSRX devices

What is an Application Security Group (ASG) in Group-Based Policy (GBP)?

A physical firewall appliance that inspects traffic between applications

A collection of workloads that share similar security requirements and are treated as a single entity in policies

A routing table that determines the next hop for application traffic

A log file that records all security events for an application

Juniper NetworksCertified Professional, Data Center (JNCIP-DC)

Domain 6Objective 4

Group-Based Policy (GBP) JN0-683 Practice Questions (Page 2)

Part of the Data Center Multitenancy and Security domain, which makes up ~12% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 15 practice questions to prepare you well beyond it. (estimate)

15questions here

3free pages

5concepts

Questions 6–10

6foundation · easy
Which Junos command would you use to verify the current GBP policy configuration on a device?
Select an answer first
7application · medium
An administrator is configuring GBP and needs to allow HTTPS traffic from the web ASG to the app ASG. Which configuration element is used to specify this traffic?
Select an answer first
8expert · medium
A company is implementing GBP and has a requirement to allow traffic between two ASGs only during business hours. What is the best way to achieve this?
Select an answer first
9expert · medium
A company is deploying GBP in a data center with multiple vSRX devices. The requirement is to ensure that policies are consistently enforced across all vSRX devices. What is the best approach?
Select an answer first
10foundation · easy
What is an Application Security Group (ASG) in Group-Based Policy (GBP)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-683

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-683” is a trademark of its owner, used for identification only.