Practice · JNCIS-SEC

~/juniper-jncis-sec · juniper-jncis-sec_d1_e32cbc414a2d ▊

juniper-jncis-sec_d1_e32cbc414a2d domain/d1 · medium single

During IDP validation, an engineer runs a Nikto scan against a lab Tomcat server through a spoke SRX. The security policy for the traffic is currently set to DENY. What is the recommended policy action so that IDP inspection works as intended?

A Set the policy action to PERMIT, otherwise the IDP settings might override the DENY statement
B Keep the DENY action so IDP can inspect blocked traffic
C Set the policy to reject and log so IDP events are generated
D Disable the application policy while running the scanner

Unlock this exam to join the per-question discussion and vote on questions.

next question →