Juniper Exam JN0-335 Topic 3 Question 46 Discussion

Actual exam question for Juniper's JN0-335 exam

Question #: 46
Topic #: 3

Click the Exhibit button.

You are asked to create a security policy that will automatically add infected hosts to the infected hosts feed and block further communication through the SRX Series device.

What needs to be added to this configuration to complete this task?

AAdd a security intelligence policy to the permit portion of the security policy.

BAdd an action to the permit portion of the security policy.

CAdd logging to the permit portion of the security policy.

DAdd a match rule to the security policy with an appropriate threat level.

Show Suggested Answer

Suggested Answer: B

The logging parameter that will provide the function of showing tabular data for operational mode commands is count. The count parameter displays the number of packets and bytes that match a security policy and the action taken by the policy. The count parameter can be used with the show security policies hit-count command to display the policy counters in a tabular format. The count parameter can also be used with the show security flow session command to display the session counters in a tabular format.Reference:=show security policies hit-count,show security flow session

by Virgina at Feb 12, 2025, 05:13 PM

Limited Time Offer

25%

Off

Get Premium JN0-335 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rosalind

2 months ago

Aha! I've got it. B is the answer, no doubt. Adding an action to the permit policy will really put those infected hosts in their place. It's like a security dance, you know? Gotta lead with the right step.

upvoted 0 times

Soledad

23 days ago

User 3: I agree, it's like a security dance with the right steps in place.

upvoted 0 times

...

Clay

25 days ago

User 2: Absolutely, adding an action is key to stopping those infected hosts.

upvoted 0 times

...

Dick

1 months ago

User 1: I think B is the answer too. It's all about taking action.

upvoted 0 times

...

Adelle

3 months ago

This is a tricky one, but I'm going with C. Logging the permit portion is key to tracking those pesky infected hosts. Gotta keep an eye on the traffic, you know?

upvoted 0 times

Carline

1 months ago

C) Add logging to the permit portion of the security policy.

upvoted 0 times

...

Rene

1 months ago

B) Add an action to the permit portion of the security policy.

upvoted 0 times

...

Quiana

2 months ago

A) Add a security intelligence policy to the permit portion of the security policy.

upvoted 0 times

...

Alishia

3 months ago

D is the way to go, my friend. A match rule with an appropriate threat level will do the trick. Gotta keep those infected hosts at bay, you know?

upvoted 0 times

Launa

1 months ago

D) Add a match rule to the security policy with an appropriate threat level.

upvoted 0 times

...

Sharan

1 months ago

C) Add logging to the permit portion of the security policy.

upvoted 0 times

...

Irving

2 months ago

B) Add an action to the permit portion of the security policy.

upvoted 0 times

...

Melina

2 months ago

A) Add a security intelligence policy to the permit portion of the security policy.

upvoted 0 times

...

Cassi

3 months ago

Hmm, I think the answer is B. Adding an action to the permit portion of the security policy seems like the right way to automatically block infected hosts. Simple and straightforward.

upvoted 0 times