Regarding static attack object groups, which two statements are true? (Choose two.)
Regarding static attack object groups, which two statements are true? (Choose two.)
Static attack object groups are predefined and do not automatically update their membership when Juniper updates the IPS signature database. Membership in these groups remains static unless it is manually altered by administrators. Therefore, statements indicating that group membership does not change automatically when Juniper updates the database and that administrators must manually add matching attack objects to a custom group are correct.
duplicate with question 93
hi 66dc178
the only difference is one says static and q93 says dynamic, i think for static its C+D static attack object groups are predefined groups of attack objects that are included in Juniper's IPS signature database. These groups do not change automatically when Juniper updates the database2.
for dynamci - A dynamic group contains attack objects that are automatically added or deleted based on specified criteria for the group
Dynamic attack groups provide administrators with a powerful ability to adjust to new threats when new attack objects are downloaded from Juniper. Whereas static attack groups allow you to create groups that don’t automatically change with signature attack updates, dynamic attack groups do change. And they have very intelligent controls for defining what should be added or removed with attack updates. Dynamic attack groups use filters to define the attributes of attack objects that would select them to be implemented in the group. Additionally, you can override members in the groups to exclude them if need be.
A static attack group is essentially a group to which you manually add attack objects and groups (both predefined and custom) that will not add members during attack updates. If attack objects are modified as part of an attack update, they are updated in the group; if they are deleted, they are removed from the group. No new attack objects are added to this group, however. Static groups are very useful if you want strict control over adding new attacks into attack groups during signature updates to ensure that you don’t cause unexpected results with new attack objects. The only things you need to define for static groups are the members that are added to this group.
C and D is correct