Juniper JN0-696 Exam Questions

Question 6 of 71

While attempting to set up IDP on an SRX Series device, the IDP attack database fails to download.
What is one reason for this behavior?

The device's Untrust zone to Trust zone security policy does not allow this traffic.

The device's configuration does not include the URL from which to retrieve the attack database.

A firewall filter applied to the loopback interface is preventing the download of the attack database.

The host inbound traffic has not been configured correctly.

Correct Answer: B

Question 7 of 71

When attempting to delete IDP policies and configurations from an SRX Series device, a user enters these configuration commands:

Delete security idp -

Commit -
However, after the commit has completed, the configuration is still present under the [edit security idp] hierarchy.
What should the user do to permanently remove the configuration?

Delete the /var/db/scripts/commit/templates.xsl file and reboot the device.

Delete the [edit security idp] hierarchy, commit the change, and immediately reboot the device.

Stop the idpd process using the set system processes idp-policy disable configuration command, commit the change, delete the [edit security idp] hierarchy, and then commit that change.

Delete the IDP templates commit script from the [edit system scripts commit] hierarchy, delete the [edit security idp] hierarchy, and then commit the change.

Correct Answer: D

Question 8 of 71

You recently configured the antivirus feature profile on your Junos device. The security policy is sending traffic for antivirus scanning. However, the traffic is being blocked and you repeatedly receive the system log message that the scan engine is not ready. You must not allow the traffic to be dropped when the scan engine is not ready.
Which action will resolve this problem?

Configure antivirus trickling to prevent the scan engine from timing out.

Configure an antivirus file scanning extension list to reduce the number of files for scanning.

Configure an antivirus fallback option to permit the traffic when the scan engine is not ready.

Configure an antivirus content size limit to minimize the scanning of large files.

Correct Answer: C

Question 9 of 71

You are troubleshooting a problem on your Junos device where the antispam SBL server is no longer filtering known spam hosts. You notice that local list antispam filtering is still working for known spam hosts.
What would cause this problem?

You have configured the sbl-default-server parameter in the antispam feature profile.

DNS has stopped working on your Junos device.

The antispam license has expired on your Junos device.

The default spam-action parameter has been set to permit.

Correct Answer: C

Question 10 of 71

In preparation for future expansion, a user decides to configure a stand-alone SRX Series device for chassis-clustering mode. The user enters the command set chassis cluster cluster-id 0 node 0 reboot on the device. After the device reboots, the user sees this output: user@host> show chassis cluster status error: Chassis cluster is not enabled. user@host>
The device does not enter chassis-clustering mode.
What is the problem?

An SRX Series device will not enter chassis-clustering mode unless the fxp0 and fxp1 interfaces are defined in the configuration.

An SRX Series device will only enter chassis-clustering mode when it finds a peer that is also configured for chassis-clustering mode.

Cluster ID 0 is not valid for a chassis cluster.

Node ID 0 is not valid for a chassis cluster.

Correct Answer: C