Courseiva
Content SecurityhardMultiple ChoiceObjective-mapped

JNCIA-SEC Content Security Practice Question

An administrator configures Unified Threat Management (UTM) antivirus inspection on an SRX device using the Junos Express antivirus engine. During high-traffic periods, users report that large file downloads are failing or timing out. Which CLI command or configuration adjustment is most appropriate to resolve this issue by increasing the maximum file size limit inspected by the antivirus engine?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

set security utm feature-profile antivirus profile default http-profile maximum-file-size <size>

The antivirus engine on SRX devices has configurable size limits for stream inspection. Modifying the maximum file size under the UTM antivirus profile prevents timeouts or drops on large files.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • set security utm default-profile antivirus max-buffer-size <size>

    Why it's wrong here

    This command path does not exist in Junos OS UTM configuration.

  • set security utm feature-profile antivirus profile default http-profile maximum-file-size <size>

    Why this is correct

    The maximum-file-size parameter under the HTTP profile of the UTM antivirus configuration controls the threshold for file inspection.

  • set security flow tcp-mss <size>

    Why it's wrong here

    TCP MSS adjustment alters segment size for MTU optimization, not UTM file size limits.

  • set security utm engine stream-scanning max-object-size <size>

    Why it's wrong here

    This syntax is invalid for Junos UTM antivirus profile tuning.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

One of 513 original JNCIA-SEC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Juniper Networks exam blueprint

This JNCIA-SEC practice question is part of Courseiva's free Juniper Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the JNCIA-SEC exam.