JNCIS-ENT: Juniper Networks Certified Specialist – Enterprise Routing and Switching — Question 36

When working with network events on a Juniper Secure Analytics device, flow records come from which source?

Answer options

• A. tap port
• B. SPAN
• C. switch
• D. mirror

Correct answer: B

Explanation

The correct answer is B, as flow records are typically obtained via SPAN (Switched Port Analyzer) configurations, which duplicate traffic for analysis. Options A (tap port), C (switch), and D (mirror) may refer to methods of capturing traffic, but SPAN is the standard method in this context for Juniper devices.