JNCIA-SEC Security Policies Practice Question
An enterprise security policy requires that any traffic traversing from the DMZ zone to the Internal zone must first be inspected by an application-identification engine before the policy action is enforced. Which feature must be enabled within the security policy to achieve this behavior?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enabling AppID match criteria by specifying applications within the security policy.
AppID requires application identification to be integrated into the security policy match criteria, which can be accomplished by referencing specific applications or application sets.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Attaching a security screen profile to the DMZ zone.
Why it's wrong here
Incorrect. Security screens protect against network attacks, they do not provide application inspection for policy enforcement.
- ✓
Enabling AppID match criteria by specifying applications within the security policy.
Why this is correct
Correct. By incorporating application terms in the match criteria, Junos uses AppID to inspect and classify traffic before enforcing the policy action.
- ✗
Enabling stateless firewall filters on the egress interface.
Why it's wrong here
Incorrect. Stateless filters do not perform AppID inspection.
- ✗
Configuring global policies with an idle-timeout parameter.
Why it's wrong here
Incorrect. Idle timeouts manage session aging, not application inspection.
About these practice questions
Courseiva writes every JNCIA-SEC question from scratch — 513 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Juniper Networks exam blueprint
This JNCIA-SEC practice question is part of Courseiva's free Juniper Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the JNCIA-SEC exam.