JNCIA-SEC Practice Test 8 — 10 Questions

Question 1

You need to verify whether application identification (AppID) is successfully classifying traffic within security policies. Which command displays AppID session details?

Accepted Answer

show security flow session extensive. The show security alg status or show security flow session extensive commands show application details associated with active sessions.

Answer

show application-firewall status

Answer

show security policies app-id-hits

Answer

show security app-tracking summary

Question 2

Which command allows an administrator to view system log files directly from the Junos CLI?

Accepted Answer

show log messages. The file show command or reviewing logs via log file viewing commands is standard. Specifically, 'show log <filename>' is used.

Answer

view log file

Answer

read log system

Answer

display system log

Question 3

Which TWO statements are true regarding Junos OS security policies and address books? (Choose two)

Accepted Answer

Security policies reference address book objects to specify traffic match criteria.. Security policies use address book objects to define match criteria for source and destination traffic.

Answer

Address books are configured under the [edit firewall] hierarchy.

Answer

Address books are mandatory for all Junos routing operations.

Answer

Security policies cannot reference global address books, only zone-specific address books.

Question 4

Which THREE parameters can be used to filter output when executing the 'show security flow session' command? (Choose three)

Accepted Answer

destination-prefix. Session display can be filtered by source prefix, destination prefix, and destination port.

Answer

chassis-slot

Answer

routing-engine-core

Question 5

An administrator configures traceoptions for security policies. Where can they find the resulting log output file?

Accepted Answer

/var/log/. Security policy traceoptions log files are written by default to /var/log/ directory on the Routing Engine.

Answer

/config/trace/

Answer

/tmp/

Answer

/var/db/

Question 6

When troubleshooting a high CPU condition caused by security processing, which command helps identify which traffic flows or features are consuming resources?

Accepted Answer

show security flow statistics. The show security flow statistics and show security monitoring commands help understand flow processing loads.

Answer

show system cpu-accounting

Answer

show firewall filter cpu-usage

Answer

show security packet-processing load

Question 7

Which THREE parameters are typically included in security flow traceoptions output when troubleshooting dropped packets? (Choose three)

Accepted Answer

Packet reception and interface context. Flow traceoptions capture packet reception, policy lookup results, session allocation, and drop reasons.

Answer

Chassis power supply voltage levels

Answer

BGP AS path recomputation steps

Question 8

You need to perform packet capture on an SRX Series device to analyze suspicious traffic hitting an interface. Which built-in Junos utility should you use?

Accepted Answer

monitor traffic interface ge-0/0/0. Junos provides packet capture capabilities using the monitor traffic command.

Answer

show security packet-capture interface

Answer

request diagnostic capture start

Answer

start shell tcpdump -i ge-0/0/0

Question 9

An administrator needs to verify whether IDP (Intrusion Detection and Prevention) is actively inspecting traffic. Which operational command should be used?

Accepted Answer

show security idp status. The show security idp status command displays IDP engine status, policy loading, and packet inspection statistics.

Answer

show idp policy active

Answer

show security flow idp-stats

Answer

show firewall idp-inspection

Question 10

Which TWO factors are important when analyzing session table exhaustion issues on an SRX Series firewall? (Choose two)

Accepted Answer

Identifying top sources or application types generating high session volumes. Session table exhaustion troubleshooting involves examining max-sessions limits and identifying top session creators/attack sources.

Answer

Checking interface cable physical integrity

Answer

Verifying BGP route convergence timers

Answer

Inspecting NTP time synchronization accuracy