You have deployed automated threat mitigation using Security Director with Policy Enforcer, Juniper ATP Cloud, SRX Series devices, and EX Series…

Policy Enforcer interacts with other network elements like EX switches to enforce blocking of

infected hosts based on threat intelligence from ATP Cloud and other sources. For more information,

refer to Juniper Policy Enforcer Documentation.

In a Juniper automated threat mitigation setup involving Security Director, Policy Enforcer, Juniper

ATP Cloud, SRX Series, and EX Series switches, the Policy Enforcer is the component responsible for

blocking infected hosts. The role of each component is as follows:

Policy Enforcer (Correct: Option A):

Policy Enforcer receives threat intelligence from Juniper ATP Cloud and instructs SRX devices and EX

Series switches to block or quarantine infected hosts. Policy Enforcer pushes policies to these devices

to enforce the mitigation actions.

Security Director (Incorrect):

Security Director provides centralized management and visibility but does not directly enforce

policies.

Juniper ATP Cloud (Incorrect):

Juniper ATP Cloud is responsible for analyzing threats and providing intelligence but does not take

direct mitigation actions.

EX Series Switch (Incorrect):

EX Series switches can enforce the policy pushed by Policy Enforcer but are not responsible for

deciding which hosts to block.

Juniper Reference:

Juniper ATP Cloud and Policy Enforcer Documentation: Details the roles of each component in the

automated threat mitigation architecture.