Juniper JNCIS-SEC JN0-335 Exam Questions and Answers

dumps2023-06-17T10:33:28+08:00

To pass the Juniper JNCIS-SEC JN0-335 exam easily, the new cracked Juniper certification JN0-335 exam questions and answers are good enough. There are 65 multiple-choice questions in the real Juniper JN0-335 exam, and you have 90 minutes to finish the test. The pass/fail status is available immediately after taking the JN0-335 exam. The available language is English. Free Juniper JNCIS-SEC JN0-335 exam questions and answers are below.

Page 1 of 2

1. A client has attempted communication with a known command-and-control server and it has reached the configured threat level threshold.

Which feed will the clients IP address be automatically added to in this situation?

the command-and-control cloud feed

the allowlist and blocklist feed

the custom cloud feed

the infected host cloud feed

2. Exhibit

When trying to set up a server protection SSL proxy, you receive the error shown.

What are two reasons for this error? (Choose two.)

The SSL proxy certificate ID is part of a blocklist.

The SSL proxy certificate ID does not have the correct renegotiation option set.

The SSL proxy certificate ID is for a forwarding proxy.

The SSL proxy certificate ID does not exist.

3. You are asked to reduce the load that the JIMS server places on your

Which action should you take in this situation?

Connect JIMS to the RADIUS server

Connect JIMS to the domain Exchange server

Connect JIMS to the domain SQL server.

Connect JIMS to another SRX Series device.

4. Exhibit

You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172 25.11.0/24 subnet to the Internet You create a policy named permit-http between the trust and untrust zones that permits HTTP traffic. When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.

Which two actions would correct the error? (Choose two.)

Issue the rollback 1 command from the top of the configuration hierarchy and attempt the commit again.

Execute the Junos commit full command to override the error and apply the configuration.

Create a custom application named http at the [edit applications] hierarchy.

Modify the security policy to use the built-in Junos-http applications.

5. What are two types of system logs that Junos generates? (Choose two.)

SQL log files

data plane logs

system core dump files

control plane logs

6. You are asked to ensure that if the session table on your SRX Series device gets close to exhausting its resources, that you enforce a more aggress.ve age-out of existing flows.

In this scenario, which two statements are correct? (Choose two.)

The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the low-watermark value is met.

The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the high-watermark value is met.

The high-watermark configuration specifies the percentage of how much of the session table is left before disabling a more aggressive age- out timer.

The high-watermark configuration specifies the percentage of how much of the session table can be allocated before applying a more aggressive age-out timer

7. Exhibit

Referring to the exhibit which statement is true?

SSL proxy functions will ignore the session.

SSL proxy leverages post-match results.

SSL proxy must wait for return traffic for the final match to occur.

SSL proxy leverages pre-match result

8. When a security policy is deleted, which statement is correct about the default behavior of active sessions allowed by that policy?

The active sessions allowed by the policy will be dropped.

The active sessions allowed by the policy will be marked as a legacy flow and will continue to be forwarded.

The active sessions allowed by the policy will be reevaluated by the cached

The active sessions allowed by the policy will continue

9. You want to use IPS signatures to monitor traffic.

Which module in the AppSecure suite will help in this task?

AppTrack

AppQoS

AppFW

APPID

10. Exhibit

Using the information from the exhibit, which statement is correct?

Redundancy group 1 is in an ineligible state.

Node1 is the active node for the control plane

There are no issues with the cluster.

Redundancy group 0 is in an ineligible state.

Page 2 of 2

11. After JSA receives external events and flows, which two steps occur? (Choose two.)

After formatting the data, the data is stored in an asset database.

Before formatting the data, the data is analyzed for relevant information.

Before the information is filtered, the information is formatted

After the information is filtered, JSA responds with active measures

12. Your company is using the Juniper ATP Cloud free model. The current inspection profile is set at 10 MB You are asked to configure ATP Cloud so that executable files up to 30 MB can be scanned while at the same time minimizing the change in scan time for other file types.

Which configuration should you use in this scenario?

Use the CLI to create a custom profile and increase the scan limit.

Use the ATP Cloud Ul to change the default profile to increase the scan limit for all files to 30 M

Use the CLI to change the default profile to increase the scan limit for all files to 30 M

Use the ATP Cloud Ul to update a custom profile and increase the scan limit for executable files to 30 M

13. What are two benefits of using a vSRX in a software-defined network? (Choose two.)

scalability

no required software license

granular security

infinite number of interfaces

14. You enable chassis clustering on two devices and assign a cluster ID and a node ID to each device.

In this scenario, what is the correct order for rebooting the devices?

Reboot the secondary device, then the primary device.

Reboot only the secondary device since the primary will assign itself the correct cluster and node I

Reboot the primary device, then the secondary device.

Reboot only the primary device since the secondary will assign itself the correct cluster and node I

15. Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)

Nancy logged in to the juniper.net Active Directory domain.

The IP address of Nancy's client PC is 172.25.11.

The IP address of the authenticating domain controller is 172.25.11.140.

Nancy is a member of the Active Directory sales group.

16. Which three statements about SRX Series device chassis clusters are true? (Choose three.)

Chassis cluster control links must be configured using RFC 1918 IP addresses.

Chassis cluster member devices synchronize configuration using the control link.

A control link failure causes the secondary cluster node to be disabled.

Recovery from a control link failure requires that the secondary member device be rebooted.

Heartbeat messages verify that the chassis cluster control link is working.

17. Which two devices would you use for DDoS protection with Policy Enforcer? (Choose two.)

vQFX

vMX

QFX

18. You have implemented a vSRX in your VMware environment. You want to implement a second vSRX Series device and enable chassis clustering.

Which two statements are correct in this scenario about the control-link settings? (Choose two.)

In the vSwitch security settings, accept promiscuous mode.

In the vSwitch properties settings, set the VLAN ID to None.

In the vSwitch security settings, reject forged transmits.

In the vSwitch security settings, reject MAC address changes.

19. Which two statements are true about the fab interface in a chassis cluster? (Choose two.)

The fab link does not support fragmentation.

The physical interface for the fab link must be specified in the configuration.

The fab link supports traditional interface features.

The Junos OS supports only one fab link.

20. You want to manually failover the primary Routing Engine in an SRX Series high availability cluster pair.

Which step is necessary to accomplish this task?

Issue the set chassis cluster disable reboot command on the primary node.

Implement the control link recover/ solution before adjusting the priorities.

Manually request the failover and identify the secondary node

Adjust the priority in the configuration on the secondary node.

Juniper JNCIS-SEC JN0-335 Exam Questions and Answers

Juniper JNCIS-SEC JN0-335 Exam Questions and Answers

Share this post

Leave a Reply Cancel reply

Related Posts