ExamGecko
Question list
Search
Search

List of questions

Search

Question 86 - JN0-335 discussion

Report
Export

Which two statements are correct about the Junos IPS feature? (Choose two.)

A.
IPS is integrated as a security service on SRX Series devices.
Answers
A.
IPS is integrated as a security service on SRX Series devices.
B.
IPS uses sandboxinQ to detect unknown attacks.
Answers
B.
IPS uses sandboxinQ to detect unknown attacks.
C.
IPS is a standalone platform running on dedicated hardware or as a virtual device.
Answers
C.
IPS is a standalone platform running on dedicated hardware or as a virtual device.
D.
IPS uses protocol anomaly rules to detect unknown attacks.
Answers
D.
IPS uses protocol anomaly rules to detect unknown attacks.
Suggested answer: A, D

Explanation:

Junos IPS is a feature that provides intrusion prevention and detection services on SRX Series devices. It monitors network traffic and compares it against predefined signatures or custom rules to identify and block malicious or unwanted packets. Two statements that are correct about the Junos IPS feature are:

IPS is integrated as a security service on SRX Series devices: Junos IPS is not a separate platform or device, but a security service that runs on SRX Series firewalls. It can be enabled and configured as part of the security policy on the SRX Series device and applied to specific zones, interfaces, or traffic flows.

IPS uses protocol anomaly rules to detect unknown attacks: Junos IPS uses two types of rules to detect attacks: signature rules and protocol anomaly rules. Signature rules match traffic against known attack patterns or signatures and block them based on predefined actions. Protocol anomaly rules detect deviations from the expected behavior or structure of common protocols, such as TCP, UDP, ICMP, etc. Protocol anomaly rules can help identify unknown or zero-day attacks that may not have a signature yet.

asked 18/09/2024
Sandeep Ramakrishnan
49 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first