JNCIA-SEC Content Security Practice Test 5 — 15 Questions

Question 1

An administrator configures Antispam with a DNSBL server. After committing the changes, logs show that no antispam queries are being performed. What is the most common reason for this when configuring DNSBL?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The system DNS name servers are not configured on the SRX device.. DNSBL (DNS-based block list) lookups require the SRX to resolve the DNSBL zone name (e.g., zen.spamhaus.org) via DNS. If no system name servers are configured under [edit system name-server], the SRX cannot perform the DNS query, so no antispam lookups are sent and the logs show zero queries. The DNSBL server itself is reachable only through DNS resolution, making system DNS configuration a hard prerequisite.

Answer

The antispam license must be activated using a hardware token.

Answer

The SRX security policy lacks an application ALG for SMTP.

Answer

The antispam profile must be attached to an interface rather than a UTM policy.

Question 2

An administrator wants to ensure that specific text strings (such as credit card numbers or restricted keywords) found in HTTP web traffic are blocked. Which UTM feature should be configured?

Accepted Answer

Content Filtering. Content filtering supports searching for specific text strings within payload streams.

Answer

Integrated Web Filtering

Answer

AppSecure AppID

Answer

Antivirus

Question 3

What is the primary function of Content Filtering in Juniper SRX Unified Threat Management?

Accepted Answer

To block specific file types, MIME types, and text strings within traffic streams.. Content filtering inspects traffic streams to enforce organizational policies regarding file types, extensions, and MIME formats.

Answer

To inspect encrypted SSL/TLS handshake certificates.

Answer

To prevent buffer overflow attacks using protocol anomaly detection.

Answer

To scan incoming emails for spam sender addresses.

Question 4

What is the primary role of Unified Threat Management (UTM) on Juniper SRX Series firewalls?

Accepted Answer

To combine multiple security features (antivirus, web filtering, antispam, content filtering) into a single firewall platform.. UTM on SRX firewalls consolidates multiple security services — antivirus, antispam, web filtering, and content filtering — into a single platform, providing layered threat protection without separate appliances. It is a licensing-enabled feature set that inspects traffic flows and applies these services inline. This unified approach simplifies management and reduces the number of point products needed at the network edge.

Answer

To provide high-availability failover between routing engines.

Answer

To optimize BGP routing path selections.

Answer

To manage IPsec VPN tunnel key exchanges.

Question 5

You are troubleshooting an antispam deployment where legitimate emails from a trusted customer domain are intermittently marked as spam by the DNSBL provider. To permanently prevent this without disabling antispam for other traffic, what should you configure?

Accepted Answer

Create a local antispam permit object containing the customer's sender domain or IP address.. Local permit lists (whitelists) under antispam custom objects allow overriding DNSBL spam detections for trusted sender domains.

Answer

Disable DNSBL server queries globally across the SRX device.

Answer

Add the customer domain to the web-filtering custom override list.

Answer

Modify the security policy action from 'permit' to 'deny' for that specific source.

Question 6

An administrator configures Web Filtering and wants to view summary statistics of blocked categories. Which operational command should be executed?

Accepted Answer

show security utm web-filtering statistics. Operational commands under 'show security utm web-filtering statistics' provide details on categories blocked and queries processed.

Answer

show system services web-filtering summary

Answer

show security flow session statistics utm

Answer

show utm web-filter counters

Question 7

Which Junos configuration hierarchy is used to create a UTM Policy Profile that bundles multiple security features?

Accepted Answer

[edit security utm policy-profile ]. The correct Junos hierarchy for creating a UTM policy profile is [edit security utm policy-profile ]. This hierarchy bundles multiple UTM features — antivirus, anti-spam, content filtering, web filtering, and application firewall — into a single profile that can then be referenced in a security policy. The exact path is critical because Junos uses a strict hierarchical configuration model.

Answer

[edit security policies utm-profile <name>]

Answer

[edit utm profile-policy <name>]

Answer

[edit security firewall utm-policy <name>]

Question 8

What is the primary function of the Antispam feature on Juniper SRX Series firewalls?

Accepted Answer

To detect and filter unsolicited bulk email messages over SMTP.. Antispam identifies and blocks unsolicited bulk commercial emails arriving over SMTP.

Answer

To inspect Layer 4 port numbers for port scanning attacks.

Answer

To block malicious executable file downloads from websites.

Answer

To categorize web traffic into productivity groups.

Question 9

Which command is used to clear UTM antivirus statistics counters on an SRX Series firewall?

Accepted Answer

clear security utm antivirus statistics. The correct command is `clear security utm antivirus statistics`. On Juniper SRX devices, the `clear` command is used to reset operational counters and statistics. The UTM antivirus module maintains statistics such as scanned files, infected files, and scan errors, and these are cleared using the `clear security utm antivirus statistics` command. This command is part of the standard Junos CLI operational mode and directly targets the antivirus statistics table.

Answer

clear system antivirus counters

Answer

request security utm antivirus clear-stats

Answer

reset security utm antivirus counters

Question 10

You are configuring an SRX firewall with Web Filtering and need to ensure that specific URLs are always permitted regardless of their cloud-assigned category. Where should you define these permitted URLs?

Accepted Answer

In a custom URL category assigned a permit action, referenced in the web-filtering profile.. Custom URL patterns and custom categories allow defining local override rules that take precedence over cloud ratings.

Answer

In the system-wide global bypass list under [edit system services web].

Answer

In the security policy source address book.

Answer

In the AppSecure custom application signature database.

Question 11

An administrator notices that Antivirus scanning is causing high latency for VoIP and real-time streaming traffic passing through the SRX firewall. How should the administrator resolve this issue while maintaining security for web traffic?

Accepted Answer

Remove the UTM policy profile attachment from the security policy specifically handling real-time VoIP traffic.. To prevent latency-sensitive traffic (like VoIP) from being impacted by UTM, the security policy matching VoIP traffic should omit the UTM policy profile attachment.

Answer

Convert the antivirus profile from stream mode to batch mode.

Answer

Disable stateful inspection globally across the device.

Answer

Configure a higher priority routing metric for VoIP packets.

Question 12

What is the primary function of the Integrated Web Filtering feature on Juniper SRX Series firewalls?

Accepted Answer

To categorize URLs and enforce access control based on website categories.. Integrated Web Filtering categorizes websites and allows administrators to enforce access policies.

Answer

To scan email attachments for virus payloads.

Answer

To inspect DNS queries for cache poisoning attacks.

Answer

To enforce user authentication passwords.

Question 13

Which THREE parameters can be configured within a UTM policy profile on a Juniper SRX Series firewall? (Choose three.)

Accepted Answer

Antispam profile reference. A UTM policy profile on a Juniper SRX is essentially a container that binds together the various content-security profiles applied to traffic, so option B (Antispam profile reference) is correct because the UTM policy specifies which antispam profile to use for matching traffic. Option D (Antivirus profile reference) is correct because the UTM policy likewise references an antivirus profile to scan sessions for malware. Option E (Web-filtering profile reference) is correct because the UTM policy also references a web-filtering (URL filtering) profile to categorize and block or permit web content. Options A and C are incorrect: IPsec VPN IKE gateway settings are configured under the VPN/IKE hierarchy, not inside a UTM policy, and BGP routing protocol parameters belong to routing-options/protocols configuration, which is unrelated to UTM content security.

Answer

IPsec VPNike gateway settings

Answer

BGP routing protocol parameters

Question 14

You are troubleshooting an issue where an SRX firewall fails to update its UTM antivirus signatures automatically. The firewall has internet access, but updates consistently fail with a signature download error. Which troubleshooting step or CLI command can verify whether the SRX can reach the Juniper update servers?

Accepted Answer

ping update.juniper.net (or the configured update server hostname) to verify DNS and reachability.. Testing connectivity and DNS resolution to the update servers via ping or checking update server status helps diagnose update failures.

Answer

Reboot the Routing Engine into single-user recovery mode.

Answer

Run 'request system software delete antivirus' to reset the update daemon.

Answer

Modify the security policy to allow all traffic without inspection.

Question 15

Which UTM feature on Juniper SRX Series firewalls is designed to prevent malware and viruses from entering the network via HTTP or SMTP streams?

Accepted Answer

Antivirus. Antivirus is the UTM feature designed to detect and block malware and viruses.

Answer

Antispam

Answer

Web Filtering

Answer

Content Filtering