JNCIA-SEC Content Security Practice Question
An administrator configures Content Filtering to block all .exe files, but users report that they can still download .exe files over encrypted HTTPS connections. What is the most likely reason for this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
HTTPS decryption (SSL proxy) is not configured, so the firewall cannot inspect the encrypted payload for file extensions.
Content filtering inspects cleartext HTTP streams; encrypted HTTPS streams cannot be inspected for file extensions unless SSL Proxy (HTTPS decryption) is enabled.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
HTTPS decryption (SSL proxy) is not configured, so the firewall cannot inspect the encrypted payload for file extensions.
Why this is correct
Encrypted HTTPS traffic hides file content and extensions from content filtering unless decrypted by SSL proxy.
- ✗
Content filtering only supports FTP traffic.
Why it's wrong here
Content filtering supports both HTTP and FTP.
- ✗
The content filtering license has expired.
Why it's wrong here
Content filtering does not require an external cloud license like web filtering does.
- ✗
The SRX control plane lacks memory.
Why it's wrong here
Memory shortages would cause general platform instability, not protocol-specific bypasses.
About these practice questions
One of 513 original JNCIA-SEC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Juniper Networks exam blueprint
This JNCIA-SEC practice question is part of Courseiva's free Juniper Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the JNCIA-SEC exam.