JNCIE-DC: Juniper Networks Certified Expert – Data Center — Question 6

Your company is migrating an existing enterprise application to use TLS. The application is written in PHP and must have IPS protection.
Which two actions will ensure that the application is protected on an SRX5400? (Choose two.)

Answer options

• A. Use an IPS policy to protect all port 80 traffic.
• B. Use the SSL reverse proxy feature.
• C. Use the IPS policy that includes critical and major PHP signatures.
• D. Use enhanced Web filtering.

Correct answer: C, D

Explanation

Option C is correct because using an IPS policy that includes critical and major PHP signatures ensures that vulnerabilities specific to PHP are monitored and protected. Option D is also correct as enhanced Web filtering provides additional security measures against web-based threats. Options A and B do not specifically address the PHP application and its IPS protection requirements.