JNCIE-SEC

Practice session

When configuring Sky ATP (Advanced Threat Prevention) integration on an SRX, you submit a suspicious file for cloud sandbox analysis. The SRX receives a threat score of 7 (on a 0-10 scale where 10 is most malicious). Your policy is configured to block files with a threat score of 8 or above. What action does the SRX take for this file, and how should you handle existing sessions that were permitted while awaiting the verdict?

Loading your practice session…