JNCIA-SEC · domain
Content Security
This domain covers Juniper SRX Series UTM features: antivirus, antispam, Web filtering, content filtering, and UTM policies. It tests configuration hierarchy, profile parameters, handling of nested threats like executables in archives, and operational commands to clear UTM statistics counters.
Focused practice
Practice Content Security questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Content Security
Be able to configure UTM profiles and policies on SRX, and know how to block nested threats like executables in archives. The most important thing is to apply UTM profiles correctly in security policies to enforce content security.
Configuring UTM Web Filtering profiles under the security utm hierarchy.
Identifying three configurable parameters in a UTM policy profile.
Preventing downloads of archives containing executables via content filtering.
Clearing UTM antivirus statistics counters using the clear security utm command.
Watch out for
Common Content Security exam traps
- ▸Assuming content filtering blocks executables inside archives; it does not inspect archive contents by default.
- ▸Confusing UTM policy profile parameters with those of individual UTM feature profiles.
- ▸Using incorrect hierarchy for Web filtering, such as security policies instead of security utm.
Question index
All Content Security questions (54)
Click any question to see the full explanation, or start a practice session above.
Which THREE parameters can be configured when tuning an Antivirus profile in Junos OS UTM? (Choose three.)
Hard2Which UTM feature on Juniper SRX Series firewalls is designed to prevent malware and viruses from entering the network via HTTP or SMTP streams?
Easy3You are configuring UTM antivirus on an SRX Series firewall. The security team wants the device to scan SMTP traffic for malicious attachments while allowing POP3 downloads to bypass scanning for performance reasons. Which configuration step is required to apply the antivirus profile only to SMTP?
Medium4An administrator is troubleshooting an antivirus profile on an SRX Series device where certain archive files (.zip) containing test malware are bypassing inspection. Which THREE configuration elements or factors should the administrator verify? (Choose three.)
Hard5What is the primary function of the Junos Express Antivirus engine on SRX Series firewalls?
Easy6An administrator configures Antispam with a DNSBL server. After committing the changes, logs show that no antispam queries are being performed. What is the most common reason for this when configuring DNSBL?
Medium7An administrator notices that the SRX's antispam feature is not quarantining messages even though the SBL server is reachable and the policy references an antispam profile. The mail server is on the DMZ, and traffic is SMTP over port 25. Which action should the administrator verify first?
Hard8When configuring Kaspersky-based Antivirus on an SRX Series device, which operational mode reduces resource consumption by only scanning files matching specific high-risk protocol extensions?
Hard9An administrator configures Web Filtering and wants to view summary statistics of blocked categories. Which operational command should be executed?
Medium10An administrator configures Antispam inspection, but wants to ensure that emails from internal trusted hosts bypass antispam scanning. How should this be handled?
Medium11What is the primary function of the Integrated Web Filtering feature on Juniper SRX Series firewalls?
Easy12An administrator is deploying an SRX Series firewall at a branch office. The security policy must inspect SMTP traffic for spam and also scan HTTP downloads for viruses. The administrator needs to create a UTM policy that applies both antispam and antivirus profiles. Which statement is correct about the UTM policy configuration?
Medium13An administrator configures Web Filtering with a custom block message. When users visit a blocked site, they do not see the custom message; instead, they receive a generic browser connection error. What is the most likely cause of this behavior?
Medium14An administrator configures Content Filtering to block all .exe files, but users report that they can still download .exe files over encrypted HTTPS connections. What is the most likely reason for this?
Medium15When configuring an Integrated Web Filtering profile, you want to ensure that URLs categorized as 'Malware' or 'Phishing' are blocked immediately, while URLs categorized as 'Streaming Media' generate a log entry but are permitted. How should you configure this in Junos?
Hard16Which TWO actions can be taken when an email message is identified as spam by an Antispam profile on an SRX Series firewall? (Choose two.)
Medium17An administrator needs to configure basic web filtering on a Juniper SRX Series device using the Integrated Web Filtering feature. Which license is strictly required on the SRX Series device to enable communication with the cloud-based web filtering rating server?
Easy18An administrator notices that Antivirus scanning is causing high latency for VoIP and real-time streaming traffic passing through the SRX firewall. How should the administrator resolve this issue while maintaining security for web traffic?
Medium19Which Junos CLI command displays the version and status of the Integrated Web Filtering engine?
Easy20Which Junos configuration hierarchy is used to create a UTM Policy Profile that bundles multiple security features?
Easy21You are deploying UTM content filtering on an SRX Series firewall to block downloads of files with specific extensions. A user reports that they can still download a file with the extension '.exe' even though the content filtering profile is configured to block it. Which step should you verify first?
Medium22An administrator is deploying UTM antivirus on an SRX Series firewall. The security team requires that files larger than a specified size be bypassed by the antivirus engine to avoid excessive resource consumption. The administrator configures the UTM policy profile with the appropriate maximum file size. Which configuration parameter must be set within the UTM policy to enforce this limit?
Medium23An administrator wants to verify that the antivirus signature database on an SRX firewall is up to date. Which operational command should be used?
Medium24Which TWO protocols are inspected by Integrated Web Filtering on Juniper SRX Series firewalls? (Choose two.)
Medium25A security administrator is troubleshooting a UTM content filtering issue where legitimate business websites are being blocked. The administrator suspects that a custom URL pattern list is incorrectly matching these sites. Which command should be used to view the currently loaded custom URL pattern lists and their entries?
Hard26Which UTM feature on Juniper SRX Series firewalls is responsible for inspecting incoming Simple Mail Transfer Protocol (SMTP) traffic for unsolicited bulk commercial email?
Easy27What is the primary role of Unified Threat Management (UTM) on Juniper SRX Series firewalls?
Easy28What is the purpose of a Custom URL Category in Juniper SRX Web Filtering?
Easy29An administrator wants to block access to a specific list of URLs on an SRX Series firewall. The administrator decides to use custom URL categories instead of a predefined category. Which statement describes how custom URL categories are used in content filtering?
Easy30What is the primary function of Content Filtering in Juniper SRX Unified Threat Management?
Easy31Which TWO actions can be configured when a URL is matched against a blocked category in an Integrated Web Filtering profile on an SRX Series device? (Choose two.)
Medium32You are troubleshooting an antispam deployment where legitimate emails from a trusted customer domain are intermittently marked as spam by the DNSBL provider. To permanently prevent this without disabling antispam for other traffic, what should you configure?
Hard33What is the primary purpose of a UTM policy profile on a Juniper SRX firewall?
Easy34Which UTM feature on an SRX Series firewall is designed to inspect and block malicious attachments in email traffic?
Easy35Which THREE configuration elements are required to successfully implement Integrated Web Filtering on a Juniper SRX Series firewall? (Choose three.)
Hard36An administrator needs to ensure that Antispam inspection is applied only to inbound mail destined for the corporate mail server. How should this be achieved in the security policy configuration?
Medium37An administrator notices that the SRX firewall is failing to inspect encrypted HTTPS traffic for web filtering and antivirus violations. The security policy currently permits traffic from the trust zone to the untrust zone with a UTM profile attached. What must be configured to enable content security inspection on this HTTPS traffic?
Hard38An administrator is configuring a Unified Threat Management (UTM) policy on a Juniper SRX Series device to protect internal users from downloading malicious software. Which UTM feature should the administrator enable and configure to scan HTTP and FTP traffic for viruses?
Easy39An administrator is configuring antispam on an SRX Series firewall. The administrator wants to use both a local list and a remote server for spam filtering. Which two statements are correct about antispam configuration on the SRX? (Choose two.)
Medium40An administrator is using Integrated Web Filtering on an SRX Series firewall. The administrator wants to block access to a category of websites that is not included in the default set of categories. Which action should the administrator take?
Medium41Which Junos configuration hierarchy is used to define a UTM Web Filtering profile?
Easy42What is the primary function of the Antispam feature on Juniper SRX Series firewalls?
Easy43Which THREE parameters can be configured within a UTM policy profile on a Juniper SRX Series firewall? (Choose three.)
Hard44An administrator configures Content Filtering to block executable files (.exe). Users report that they can still download archives containing executable files inside them (.zip). What is the recommended way to prevent users from bypassing file extension blocks using compressed archives?
Medium45An administrator wants to ensure that specific text strings (such as credit card numbers or restricted keywords) found in HTTP web traffic are blocked. Which UTM feature should be configured?
Medium46You are configuring an SRX firewall with Web Filtering and need to ensure that specific URLs are always permitted regardless of their cloud-assigned category. Where should you define these permitted URLs?
Hard47Which TWO protocols are supported for Antivirus scanning within Juniper SRX UTM profiles? (Choose two.)
Medium48A network administrator needs to prevent users in the engineering department from uploading company source code to unauthorized cloud file-sharing services via web browsers. Which configuration mechanism within Juniper UTM content filtering accomplishes this task?
Medium49Which THREE parameters must be configured when setting up a DNSBL (DNS Black List) server profile for Antispam inspection on a Juniper SRX Series device? (Choose three.)
Hard50You are troubleshooting an issue where an SRX firewall fails to update its UTM antivirus signatures automatically. The firewall has internet access, but updates consistently fail with a signature download error. Which troubleshooting step or CLI command can verify whether the SRX can reach the Juniper update servers?
Hard51An administrator wants to configure antispam protection on an SRX Series firewall to protect an internal mail server. Which protocol inspection engine is used by Juniper antispam to evaluate incoming messages?
Easy52Which command is used to clear UTM antivirus statistics counters on an SRX Series firewall?
Easy53What is the default action taken by a Juniper SRX UTM Antivirus profile when an infected file is detected within an HTTP stream using the Express antivirus engine?
Easy54An administrator has configured an SRX Series firewall with Integrated Web Filtering using the Juniper Enhanced Web Filtering provider. Users report that they can access a website that should be blocked by category. The administrator confirms that the site is categorized correctly in the Juniper database. Which action should be taken to ensure the SRX enforces the category block?
HardOther domains
All JNCIA-SEC exam domains
Frequently asked questions
- What does the Content Security domain cover on the JNCIA-SEC exam?
- Be able to configure UTM profiles and policies on SRX, and know how to block nested threats like executables in archives. The most important thing is to apply UTM profiles correctly in security policies to enforce content security.
- How many questions are in this domain?
- This page lists all 54 Content Security questions in the JNCIA-SEC question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Content Security questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.