[May-2024] JN0-335 Dumps Full Questions – JNCIS-SEC Exam Study Guide [Q54-Q76] – IT Certification Exam Questions & Answers

Rate this post

[May-2024] JN0-335 Dumps Full Questions – JNCIS-SEC Exam Study Guide

Exam Questions and Answers for JN0-335 Study Guide

Juniper JN0-335 exam is a certification test designed for IT professionals who are looking to further their knowledge and career in the field of network security. JN0-335 exam is also known as the Security, Specialist (JNCIS-SEC) exam and is one of the most recognized and respected certifications in the industry. The JN0-335 exam is designed to test the candidate’s knowledge and skills in the areas of security technologies, security policies, security management, and security troubleshooting.

QUESTION 54
A client has attempted communication with a known command-and-control server and it has reached the configured threat level threshold.
Which feed will the clients IP address be automatically added to in this situation?

the command-and-control cloud feed

the allowlist and blocklist feed

the custom cloud feed

the infected host cloud feed

QUESTION 55
How does the SSL proxy detect if encryption is being used?

It uses application identity services.

It verifies the length of the packet

It queries the client device.

It looks at the destination port number.

QUESTION 56
Which two statements about SRX Series device chassis clusters are correct? (Choose two.)

The chassis cluster data plane is connected with revenue ports.

The chassis cluster can contain a maximum of three devices.

The chassis cluster data plane is connected with SPC ports.

The chassis cluster can contain a maximum of two devices.

QUESTION 57
Referring to the exhibit, which two statements are true? (Choose two.)

Nancy logged in to the juniper.net Active Directory domain.

The IP address of Nancy’s client PC is 172.25.11.

The IP address of the authenticating domain controller is 172.25.11.140.

Nancy is a member of the Active Directory sales group.

QUESTION 58
Which two statements are correct about a policy scheduler? (Choose two.)

A policy scheduler can only be applied when using the policy-rematch feature.

A policy scheduler can be dynamically activated based on traffic flow volumes.

A policy scheduler can be defined using a daily schedule.

A policy scheduler determines the time frame that a security policy is actively evaluated.

QUESTION 59
You want to permit access to an application but block application sub-Which two security policy features provide this capability? (Choose two.)

URL filtering

micro application detection

content filtering

APPID

QUESTION 60
Which of the following lists the correct order that the Sky ATP pipeline evaluates traffic?

Cache lookup. Static Analysis. Dynamic Analysis. Antivirus Scanning

Static Analysis. Cache lookup. Antivirus Scanning, Dynamic Analysis

Cache lookup. Antivirus Scanning, Static Analysis, Dynamic Analysis

QUESTION 61
Which two statements are correct about SSL proxy server protection? (Choose two.)

You do not need to configure the servers to use the SSL proxy the function on the SRX Series device.

You must load the server certificates on the SRX Series device.

The servers must be configured to use the SSL proxy function on the SRX Series device.

You must import the root CA on the servers.

QUESTION 62
Which two statements apply to policy scheduling? (Choose two.)

A policy refers to many schedules.

A policy refers to one schedule.

Multiple policies can refer to the same schedule.

A policy stays active regardless of when the schedule is active.

QUESTION 63
What information does encrypted traffic insights (ETI) use to notify SRX Series devices about known malware sites?

certificates

dynamic address groups

MAC addresses

domain names

QUESTION 64
You want to manually failover the primary Routing Engine in an SRX Series high availability cluster pair.
Which step is necessary to accomplish this task?

Issue the set chassis cluster disable reboot command on the primary node.

Implement the control link recover/ solution before adjusting the priorities.

Manually request the failover and identify the secondary node

Adjust the priority in the configuration on the secondary node.

QUESTION 65
When working with network events on a Juniper Secure Analytics device, flow records come from which source?

tap port

SPAN

switch

mirror

QUESTION 66
Which three statements about SRX Series device chassis clusters are true? (Choose three.)

Chassis cluster control links must be configured using RFC 1918 IP addresses.

Chassis cluster member devices synchronize configuration using the control link.

A control link failure causes the secondary cluster node to be disabled.

Recovery from a control link failure requires that the secondary member device be rebooted.

Heartbeat messages verify that the chassis cluster control link is working.

QUESTION 67
Click the Exhibit button.

Referring to the exhibit, which statement is true?

Hosts are always able to communicate through the SRX Series device no matter the threat score assigned to them on the infected host feed.

Hosts are unable to communicate through the SRX Series device after being placed on the infected host feed with a high enough threat score.

Malicious HTTP file downloads are never blocked.

Malicious HTTP file downloads are always blocked.

QUESTION 68
You are using the JIMS Administrator user interface to add multiple SRX client devices. You must share common configuration attributes across the SRX clients without having to re-enter those attributes for each SRX client instance.
Which JIMS Administrator feature would be used to accomplish this task?

JIMS automation

JIMS templates

JIMS client profiles

JIMS client defaults

QUESTION 69
Which two statements are true about mixing traditional and unified security policies? (Choose two.)

When a packet matches a unified security policy, the evaluation process terminates

Traditional security policies must come before unified security policies

Unified security policies must come before traditional security policies

When a packet matches a traditional security policy, the evaluation process terminates

QUESTION 70
Exhibit

When trying to set up a server protection SSL proxy, you receive the error shown. What are two reasons for this error? (Choose two.)

The SSL proxy certificate ID is part of a blocklist.

The SSL proxy certificate ID does not have the correct renegotiation option set.

The SSL proxy certificate ID is for a forwarding proxy.

The SSL proxy certificate ID does not exist.

QUESTION 71
Which sequence does an SRX Series device use when implementing stateful session security policies using Layer 3 routes?

An SRX Series device will perform a security policy search before conducting a longest-match Layer 3 route table lookup.

An SRX Series device performs a security policy search before implementing an ALG security check on the longest-match Layer 3 route.

An SRX Series device will conduct a longest-match Layer 3 route table lookup before performing a security policy search.

An SRX Series device conducts an ALG security check on the longest-match route before performing a security policy search.

Explanation
A stateful firewall in SRX Series devices keeps track of the state of network connections, distinguishing legitimate packets for different types of connections and allowing only packets that match a known active connection. Sessions are created when a TCP SYN packet is received and permitted by the security policy1.
A security policy is a set of rules that defines how traffic is processed by the SRX Series device. A security policy applies the security rules to the transit traffic within a context (from-zone to to-zone) and each policy is uniquely identified by its name. The traffic is classified by matching the source and destination zones, the source and destination addresses, and the application that the traffic carries in its protocol headers with the policy database in the data plane2.
A Layer 3 route is a path that a packet takes to reach its destination based on the destination IP address. The SRX Series device performs a longest-match Layer 3 route table lookup to determine the next hop for the packet3.
An Application Layer Gateway (ALG) is a software component that provides application-level awareness, security, and control for specific protocols. An ALG inspects the application-layer payload of a packet and modifies it if necessary to allow the application to traverse the SRX Series device. For example, an ALG can rewrite IP addresses and port numbers in the payload of FTP or SIP packets4.
The sequence that an SRX Series device uses when implementing stateful session security policies using Layer 3 routes is as follows3:
The SRX Series device receives a packet and conducts a longest-match Layer 3 route table lookup to determine the next hop for the packet.
The SRX Series device performs a security policy search to find a matching policy for the packet based on the source and destination zones, addresses, and application.
If a matching policy is found, the SRX Series device checks the action of the policy, which can be permit, deny, reject, or tunnel. If the action is permit, the SRX Series device allows the packet to pass through and creates a session for the packet. If the action is deny or reject, the SRX Series device drops the packet and sends an ICMP message to the sender. If the action is tunnel, the SRX Series device encapsulates the packet and forwards it to the tunnel destination.
If the packet requires an ALG, the SRX Series device applies the ALG to the packet and modifies the payload if necessary. The ALG also creates additional sessions for the packet if needed.
The SRX Series device forwards the packet to the next hop based on the routing information.
References:
1: Traffic Processing on SRX Series Firewalls Overview | Junos OS | Juniper Networks
2: Best Practices for Defining Policies on High-End SRX Series Devices – TechLibrary – Juniper Networks
3: [SRX] Example: Configuring TCP SYN Check options on a per-policy basis
4: Application Layer Gateways Overview | Junos OS | Juniper Networks

QUESTION 72
You are building a VPN tunnel between two SRX Series devices. You want the tunnel to always be established, even if there is no traffic to send. Which action would be used to achieve this goal?

Configure an RPM probe to constantly ping across the links.

Configure vpn-monitor with the optimized parameter on the tunnel.

Configure establish-tunnels with the immediately parameter.

Configure the OSPF demand-circuit feature on the tunnel interface.

QUESTION 73
Which two statements are true about Juniper ATP Cloud? (Choose two.)

Juniper ATP Cloud only uses one antivirus software package to analyze files.

Juniper ATP Cloud uses multiple antivirus software packages to analyze files.

Juniper ATP Cloud uses antivirus software packages to protect against zero-day threats.

Juniper ATP Cloud does not use antivirus software packages to protect against zero-day threats.

QUESTION 74
The AppQoE module of AppSecure provides which function?

The AppQoE module provides application-based routing.

The AppQoE module prioritizes important applications.

The AppQoE module provides routing, based on network conditions.

The AppQoE module blocks access to risky applications.

QUESTION 75
After performing a software upgrade on an SRX5800 chassis cluster, you notice that node1 is in the primary state and node0 is in the backup state. Your network standards dictate that node0 should be in the primary state.
In this scenario, which command should be used to comply with the network standards?

request chassis cluster failover redundancy-group 254 node 1

request chassis cluster failover redundancy-group 0 node 0

request chassis cluster failover redundancy-group 254 mode 0

request chassis cluster failover redundancy-group 0 node 1

QUESTION 76
Which three features are parts of Juniper Networks’ AppSecure suite? (Choose three.)

AppQoE

APBR

Secure Application Manager

AppQoS

AppFormix