Question 1

When considering managed sessions, which configuration parameter determines how full the session table

must be to implement the early age-out function?

Options :

A : session service timeout

B : high waremark

C : low watermark

D : policy rematch

Answer: B

Question 2

What is the default timeout period for a TCP session in the session table of a Junos security device?

Options :

A : 1 minute

B : 60 minutes

C : 15 minutes

D : 30 minutes

Answer: D

Question 3

Which statement regarding Juniper Identity Management Service (JIMS) domain PC probes is true?

Options :

A : JIMS domain PC probes analyze domain controller security event logs at60-mmute intervals by default.

B : JIMS domain PC probes are triggered if no username to IP address mapping is found in the domain security event log.

C : JIMS domain PC probes are triggered to map usernames to group membership information.

D : JIMS domain PC probes are initiated by an SRX Series device to verify authentication table information.

Answer: B

Question 4

Which three statements are true about the difference between cSRX-based virtual security deployments and

vSRX-based virtual security deployments? (Choose three.)

Options :

A : vSRX provides Layer 2 to Layer 7 secure services and cSRX provides Layer 4 to Layer 7 secure services.

B : cSRX requires less storage and memory space for a given deployment than vSRX-based solutions.

C : cSRX-based solutions are more scalable than vSRX-based solutions.

D : vSRX and cSRX both provide Layer 2 to Layer 7 secure services.

E : vSRX provides faster deployment time and faster reboots compared to cSRX.

Answer: A,B,C

Question 5

Data plane logging operates in which two modes? (Choose two.)

Options :

A : syslog

B : binary

C : event

D : stream

Answer: C,D