JNCIA-SEC Security Policies Practice Question
Which TWO factors must be considered when designing security policies that incorporate AppID (Application Identification)? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
If AppID cannot identify an application, it falls back to the underlying port-based protocol definition if configured.
AppID requires initial packets to classify traffic, and custom applications or dynamic signatures may impact performance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AppID profiles must be configured under the [edit security utm] hierarchy.
Why it's wrong here
Incorrect. AppID is part of AppSecure, configured under security application-tracking or policies, not UTM.
- ✓
If AppID cannot identify an application, it falls back to the underlying port-based protocol definition if configured.
Why this is correct
Correct. Fallback to basic port matching occurs if deep inspection is inconclusive.
- ✓
Traffic classification may require multiple packets before AppID can definitively identify the application.
Why this is correct
Correct. AppID inspects initial payload packets to determine the application signature.
- ✗
AppID is exclusively available for global security policies and cannot be used in zone-based policies.
Why it's wrong here
Incorrect. AppID is fully supported in both zone-based and global policies.
- ✗
AppID policies automatically bypass stateful inspection for encrypted payloads.
Why it's wrong here
Incorrect. Stateful inspection remains active.
About these practice questions
This JNCIA-SEC question is part of Courseiva's 520-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Juniper Networks exam blueprint
This JNCIA-SEC practice question is part of Courseiva's free Juniper Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the JNCIA-SEC exam.