Be able to configure UTM profiles and policies on SRX, and know how to block nested threats like executables in archives. The most important thing is to apply UTM profiles correctly in security policies to enforce content security.
Start practicing
Content Security — choose a session length
Free · No account required
Domain overview
This domain covers Juniper SRX Series UTM features: antivirus, antispam, Web filtering, content filtering, and UTM policies. It tests configuration hierarchy, profile parameters, handling of nested threats like executables in archives, and operational commands to clear UTM statistics counters.
Exam objectives
Configuring UTM Web Filtering profiles under the security utm hierarchy.
Identifying three configurable parameters in a UTM policy profile.
Preventing downloads of archives containing executables via content filtering.
Clearing UTM antivirus statistics counters using the clear security utm command.
Assuming content filtering blocks executables inside archives; it does not inspect archive contents by default.
Confusing UTM policy profile parameters with those of individual UTM feature profiles.
Using incorrect hierarchy for Web filtering, such as security policies instead of security utm.
Click any question to see the full explanation and answer options, or start a focused practice session above.
Which THREE parameters must be configured when setting up a DNSBL (DNS Black List) server profile for Antispam inspection on a Juniper SRX Series device? (Choose three.)
2Which TWO actions can be configured when a URL is matched against a blocked category in an Integrated Web Filtering profile on an SRX Series device? (Choose two.)
3An administrator needs to configure basic web filtering on a Juniper SRX Series device using the Integrated Web Filtering feature. Which license is strictly required on the SRX Series device to enable communication with the cloud-based web filtering rating server?
4What is the default action taken by a Juniper SRX UTM Antivirus profile when an infected file is detected within an HTTP stream using the Express antivirus engine?
5When configuring Kaspersky-based Antivirus on an SRX Series device, which operational mode reduces resource consumption by only scanning files matching specific high-risk protocol extensions?
6Which UTM feature on Juniper SRX Series firewalls is responsible for inspecting incoming Simple Mail Transfer Protocol (SMTP) traffic for unsolicited bulk commercial email?
7What is the primary purpose of a UTM policy profile on a Juniper SRX firewall?
8An administrator configures Web Filtering with a custom block message. When users visit a blocked site, they do not see the custom message; instead, they receive a generic browser connection error. What is the most likely cause of this behavior?
9Which Junos configuration hierarchy is used to define a UTM Web Filtering profile?
10An administrator wants to verify that the antivirus signature database on an SRX firewall is up to date. Which operational command should be used?
11What is the primary function of the Junos Express Antivirus engine on SRX Series firewalls?
12An administrator needs to ensure that Antispam inspection is applied only to inbound mail destined for the corporate mail server. How should this be achieved in the security policy configuration?
13Which TWO protocols are supported for Antivirus scanning within Juniper SRX UTM profiles? (Choose two.)
14Which THREE parameters can be configured when tuning an Antivirus profile in Junos OS UTM? (Choose three.)
15An administrator configures Antispam with a DNSBL server. After committing the changes, logs show that no antispam queries are being performed. What is the most common reason for this when configuring DNSBL?
16An administrator wants to ensure that specific text strings (such as credit card numbers or restricted keywords) found in HTTP web traffic are blocked. Which UTM feature should be configured?
17What is the primary function of Content Filtering in Juniper SRX Unified Threat Management?
18What is the primary role of Unified Threat Management (UTM) on Juniper SRX Series firewalls?
19You are troubleshooting an antispam deployment where legitimate emails from a trusted customer domain are intermittently marked as spam by the DNSBL provider. To permanently prevent this without disabling antispam for other traffic, what should you configure?
20An administrator configures Web Filtering and wants to view summary statistics of blocked categories. Which operational command should be executed?
21Which Junos configuration hierarchy is used to create a UTM Policy Profile that bundles multiple security features?
22What is the primary function of the Antispam feature on Juniper SRX Series firewalls?
23Which command is used to clear UTM antivirus statistics counters on an SRX Series firewall?
24You are configuring an SRX firewall with Web Filtering and need to ensure that specific URLs are always permitted regardless of their cloud-assigned category. Where should you define these permitted URLs?
25An administrator notices that Antivirus scanning is causing high latency for VoIP and real-time streaming traffic passing through the SRX firewall. How should the administrator resolve this issue while maintaining security for web traffic?
26What is the primary function of the Integrated Web Filtering feature on Juniper SRX Series firewalls?
27Which THREE parameters can be configured within a UTM policy profile on a Juniper SRX Series firewall? (Choose three.)
28You are troubleshooting an issue where an SRX firewall fails to update its UTM antivirus signatures automatically. The firewall has internet access, but updates consistently fail with a signature download error. Which troubleshooting step or CLI command can verify whether the SRX can reach the Juniper update servers?
29Which UTM feature on Juniper SRX Series firewalls is designed to prevent malware and viruses from entering the network via HTTP or SMTP streams?
30An administrator configures Antispam inspection, but wants to ensure that emails from internal trusted hosts bypass antispam scanning. How should this be handled?
31When configuring an Integrated Web Filtering profile, you want to ensure that URLs categorized as 'Malware' or 'Phishing' are blocked immediately, while URLs categorized as 'Streaming Media' generate a log entry but are permitted. How should you configure this in Junos?
32Which Junos CLI command displays the version and status of the Integrated Web Filtering engine?
33Which TWO protocols are inspected by Integrated Web Filtering on Juniper SRX Series firewalls? (Choose two.)
34An administrator configures Content Filtering to block executable files (.exe). Users report that they can still download archives containing executable files inside them (.zip). What is the recommended way to prevent users from bypassing file extension blocks using compressed archives?
35Which TWO actions can be taken when an email message is identified as spam by an Antispam profile on an SRX Series firewall? (Choose two.)
36Which THREE configuration elements are required to successfully implement Integrated Web Filtering on a Juniper SRX Series firewall? (Choose three.)
37What is the purpose of a Custom URL Category in Juniper SRX Web Filtering?
38An administrator configures Content Filtering to block all .exe files, but users report that they can still download .exe files over encrypted HTTPS connections. What is the most likely reason for this?
39An administrator is configuring a Unified Threat Management (UTM) policy on a Juniper SRX Series device to protect internal users from downloading malicious software. Which UTM feature should the administrator enable and configure to scan HTTP and FTP traffic for viruses?
40An administrator notices that the SRX firewall is failing to inspect encrypted HTTPS traffic for web filtering and antivirus violations. The security policy currently permits traffic from the trust zone to the untrust zone with a UTM profile attached. What must be configured to enable content security inspection on this HTTPS traffic?
41A network administrator needs to prevent users in the engineering department from uploading company source code to unauthorized cloud file-sharing services via web browsers. Which configuration mechanism within Juniper UTM content filtering accomplishes this task?
42An administrator wants to configure antispam protection on an SRX Series firewall to protect an internal mail server. Which protocol inspection engine is used by Juniper antispam to evaluate incoming messages?
43An administrator is troubleshooting an antivirus profile on an SRX Series device where certain archive files (.zip) containing test malware are bypassing inspection. Which THREE configuration elements or factors should the administrator verify? (Choose three.)
44An administrator is deploying UTM antivirus on an SRX Series firewall. The security team requires that files larger than a specified size be bypassed by the antivirus engine to avoid excessive resource consumption. The administrator configures the UTM policy profile with the appropriate maximum file size. Which configuration parameter must be set within the UTM policy to enforce this limit?
45You are configuring UTM antivirus on an SRX Series firewall. The security team wants the device to scan SMTP traffic for malicious attachments while allowing POP3 downloads to bypass scanning for performance reasons. Which configuration step is required to apply the antivirus profile only to SMTP?
46An administrator has configured an SRX Series firewall with Integrated Web Filtering using the Juniper Enhanced Web Filtering provider. Users report that they can access a website that should be blocked by category. The administrator confirms that the site is categorized correctly in the Juniper database. Which action should be taken to ensure the SRX enforces the category block?
47Which UTM feature on an SRX Series firewall is designed to inspect and block malicious attachments in email traffic?
48You are deploying UTM content filtering on an SRX Series firewall to block downloads of files with specific extensions. A user reports that they can still download a file with the extension '.exe' even though the content filtering profile is configured to block it. Which step should you verify first?
49A security administrator is troubleshooting a UTM content filtering issue where legitimate business websites are being blocked. The administrator suspects that a custom URL pattern list is incorrectly matching these sites. Which command should be used to view the currently loaded custom URL pattern lists and their entries?
50An administrator is deploying an SRX Series firewall at a branch office. The security policy must inspect SMTP traffic for spam and also scan HTTP downloads for viruses. The administrator needs to create a UTM policy that applies both antispam and antivirus profiles. Which statement is correct about the UTM policy configuration?
51An administrator notices that the SRX's antispam feature is not quarantining messages even though the SBL server is reachable and the policy references an antispam profile. The mail server is on the DMZ, and traffic is SMTP over port 25. Which action should the administrator verify first?
52An administrator wants to block access to a specific list of URLs on an SRX Series firewall. The administrator decides to use custom URL categories instead of a predefined category. Which statement describes how custom URL categories are used in content filtering?
53An administrator is configuring antispam on an SRX Series firewall. The administrator wants to use both a local list and a remote server for spam filtering. Which two statements are correct about antispam configuration on the SRX? (Choose two.)
54An administrator is using Integrated Web Filtering on an SRX Series firewall. The administrator wants to block access to a category of websites that is not included in the default set of categories. Which action should the administrator take?
Be able to configure UTM profiles and policies on SRX, and know how to block nested threats like executables in archives. The most important thing is to apply UTM profiles correctly in security policies to enforce content security.
The Courseiva JNCIA-SEC question bank contains 54 questions in the Content Security domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Content Security domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included