ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 94 - JN0-636 discussion

Report
Export

your company wants to take your juniper ATP appliance into private mode. You must give them a list of impacted features for this request.

Which two features are impacted in this scenario? (Choose two)

A.
False Positive Reporting
Answers
A.
False Positive Reporting
B.
Threat Progression Monitoring
Answers
B.
Threat Progression Monitoring
C.
GSS Telemetry
Answers
C.
GSS Telemetry
D.
Cyber Kill Chain mapping
Answers
D.
Cyber Kill Chain mapping
Suggested answer: A, C

Explanation:

Your company wants to take your Juniper ATP Appliance into private mode. You must give them a list of impacted features for this request. The two features that are impacted in this scenario are:

A) False Positive Reporting. False Positive Reporting is a feature that allows you to report false positive detections to Juniper Networks for analysis and improvement. False Positive Reporting requires an Internet connection to send the reports to Juniper Networks. If you take your Juniper ATP Appliance into private mode, False Positive Reporting will be disabled and you will not be able to report false positives1.

C) GSS Telemetry. GSS Telemetry is a feature that allows you to send anonymized threat data to Juniper Networks for analysis and improvement. GSS Telemetry requires an Internet connection to send the data to Juniper Networks. If you take your Juniper ATP Appliance into private mode, GSS Telemetry will be disabled and you will not be able to contribute to the threat intelligence community2.

The other options are incorrect because:

B) Threat Progression Monitoring. Threat Progression Monitoring is a feature that allows you to monitor the threat activity and progression across your network. Threat Progression Monitoring does not require an Internet connection and can be performed locally by the Juniper ATP Appliance. If you take your Juniper ATP Appliance into private mode, Threat Progression Monitoring will not be impacted and you will still be able to monitor the threat activity and progression3.

D) Cyber Kill Chain mapping. Cyber Kill Chain mapping is a feature that allows you to map the threat activity and progression to the stages of the Cyber Kill Chain framework. Cyber Kill Chain mapping does not require an Internet connection and can be performed locally by the Juniper ATP Appliance. If you take your Juniper ATP Appliance into private mode, Cyber Kill Chain mapping will not be impacted and you will still be able to map the threat activity and progression4.

Reference:

False Positive Reporting

GSS Telemetry

Threat Progression Monitoring

Cyber Kill Chain Mapping

asked 18/09/2024
Rudy Alexander Gonzalez
44 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first