jn0-541 Exam

- Covers the entire recommended syllabus
- Comprehensive questions and answers about jn0-541 exam
- Verified Answers Researched by Industry Experts and almost 100% correct
- jn0-541 exam questions updated on regular basis
- Same type as the certification exams, jn0-541 exam preparation is in multiple-choice questions (MCQs)
- Tested by multiple times before publishing
- Try free jn0-541 exam demo before you decide to buy it in Hiexam
- Technical support through Live Chat or Email

　
　
Exam : Juniper JN0-541
Title : Juniper IDP, Associate(JNCIA-IDP)


1. You want Enterprise Security Profiler (ESP) to generate a message when a new host is detected on a network.
Which two steps must you perform? (Choose two.)
A. Start or restart the profiler process.
B. Configure ESP to enable alerts for new host detected.
C. Configure ESP to enable application profiling, and select the contexts to profile.
D. Under the Violation Viewer tab, create a permitted object, select that object, and then click Apply.
Answer: AB

2. In which three situations would you create a compound attack object? (Choose three.)
A. When attack objects must occur in a particular order.
B. When one of the attack objects is a protocol anomaly.
C. You have at least two attack objects that define a single attack.
D. When the pattern needs to be defined using a stream 256 context.
E. When the pattern "@@@@@@@@" and context "ftp-get-filename" completely define the attack.
Answer: ABC

3. Click the Exhibit button.
In the exhibit, which sensor command would have produced this display?
A. sctop "t" option
B. sctop "s" option
C. scio policy list s0
D. scio subs qmodules s0
Answer: A

4. What is "a deviation from a protocol's expected behavior or packet format"?
A. context
B. attack signature
C. protocol anomaly
D. compound attack object
Answer: C

5. You implement Traffic Anomaly detection and you find numerous alerts of port scans from your security auditing team that you want to ignore. You create an address book entry for the security audit team specifying the IP addresses of those machines.
What should you do next?
A. Create a rule at the top of the Traffic Anomaly rulebase to ignore traffic from security audit team.
B. Create an exempt rule for the security audit team in the Exempt rulebase to ignore Traffic Anomalies.
C. Create a rule at the top of the IDP rulebase to ignore traffic from security audit team, and make this a terminal rule.
D. Create a rule at the top of the Traffic Anomaly rule base to ignore traffic from security audit team, and make this a terminal rule.
Answer: A

http://www.Hiexam.com The safer.easier way to get JNCIA Certification.