JNCIS-ENT: Juniper Networks Certified Specialist – Enterprise Routing and Switching (2021) — Question 24

Regarding dynamic attack object groups, which two statements are true? (Choose two.)

Answer options

• A. Group membership automatically changes when Juniper updates the IPS signature database.
• B. You must manually add matching attack objects to a custom group.
• C. Matching attack objects are automatically added to a custom group.
• D. Group membership does not automatically change when Juniper updates the IPS signature database.

Correct answer: A, C

Explanation

Option A is correct because dynamic groups update automatically with changes in the IPS signature database. Option C is also correct as it states that matching objects are included automatically. Options B and D are incorrect as they suggest a manual process or no change, which contradicts the nature of dynamic groups.