[Dec-2023 Newly Released] JN0-335 Exam Questions For You To Pass [Q42-Q64]

Rate this post

[Dec-2023 Newly Released] JN0-335 Exam Questions For You To Pass

Juniper JN0-335 Exam: Basic Questions With Answers

The JN0-335 exam covers a wide range of topics related to Juniper Networks security products and solutions. These include security policies, firewalls, VPNs, intrusion detection and prevention systems, network address translation, and high availability. JN0-335 exam consists of multiple-choice questions and requires candidates to demonstrate their knowledge and skills in each of these areas. Candidates are expected to have a deep understanding of the technical concepts covered in the exam and to be able to apply them to real-world scenarios.

NO.42 Click the Exhibit button.

You have configured your SRX Series device to receive authentication information from a JIMS server. However, the SRX is not receiving any authentication information.
Referring to the exhibit, how would you solve the problem?

Use the JIMS Administrator user interface to add the SRX device as client.

Generate an access token on the SRX device that matches the access token on the JIMS server.

Update the IP address of the JIMS server

Change the SRX configuration to connect to the JIMS server using HTTP.

NO.43 Click the Exhibit button.

Which two statements are true about the session shown in the exhibit? (Choose two.)

Two security policies are required for bidirectional traffic flow.

The ALG was enabled by manual configuration.

The ALG was enabled by default.

One security policy is required for bidirectional traffic flow.

NO.44 Which two statements about JIMS high availability are true? (Choose two.)

JIMS supports high availability through the installation of the primary and secondary JIMS servers.

SRX clients are configured with the shared virtual IP (VIP) address of the JIMS server.

SRX clients are configured with the unique IP addresses of the primary and secondary JIMS servers.

SRX clients synchronize authentication tables with both the primary and secondary JIMS servers.

NO.45 Exhibit

You just finished setting up your command-and-control (C&C) category with Juniper ATP Cloud. You notice that all of the feeds have zero objects in them.
Which statement is correct in this scenario?

The security intelligence policy must be configured; on a unified security policy

Use the commit full command to start the download.

No action is required, the feeds take a few minutes to download.

Set the maximum C&C entries within the Juniper ATP Cloud GUI.

NO.46 You want to deploy a virtualized SRX in your environment.
In this scenario, why would you use a vSRX instead of a cSRX? (Choose two.)

The vSRX supports Layer 2 and Layer 3 configurations.

Only the vSRX provides clustering.

The vSRX has faster boot times.

Only the vSRX provides NAT, IPS, and UTM services

NO.47 Which default protocol and port are used for JIMS to SRX client communication?

WMI over TCP; port 389

ADSI over TCP; port 389

HTTPS over TCP: port 443

RPC over TCP, port 135

NO.48 Click the Exhibit button.

Referring to the configuration shown in the exhibit, which two statements are true? (Choose two.)

The log is being stored on the local Routing Engine.

The log is being sent to a remote server.

The syslog is configured for a user facility.

The syslog is configured for an info facility.

NO.49 What is the default timeout for a TCP session on an SRX Series device?

1 minute

1 hour

30 seconds

30 minutes

NO.50 Click the Exhibit button.

Referring to the exhibit, which two devices are considered to be part of the secure fabric site with Policy Enforcer? (Choose two.)

Server-2

SRX-1

Server-1

QFX-1

NO.51 Exhibit

Referring to the SRX Series flow module diagram shown in the exhibit, where is application security processed?

Forwarding Lookup

Services ALGs

Security Policy

Screens

NO.52 What information does JIMS collect from domain event log sources? (Choose two.)

For user login events, JIMS collects the username and group membership information.

For device login events. JIMS collects the devide IP address and operating system version.

For device login events, JIMS collects the device IP address and machine name information.

For user login events, JIMS collects the login source IP address and username information.

NO.53 You are troubleshooting advanced policy-based routing (APBR).
Which two actions should you perform in this scenario? (Choose two.)

Verify that the APBR profiles are applied to the egress zone.

Verity inet.0 for correct route leaking.

Review the APBR statistics for matching rules and route modifications.

Inspect the application system cache for the application entry.

NO.54 You have deployed an SRX300 Series device and determined that files have stopped being scanned.
In this scenario, what is a reason for this problem?

The software license is a free model and only scans executable type files.

The infected host communicated with a command-and-control server, but it did not download malware.

The file is too small to have a virus.

You have exceeded the maximum files submission for your SRX platform size.

NO.55 Which two statements are true about mixing traditional and unified security policies? (Choose two.)

When a packet matches a unified security policy, the evaluation process terminates

Traditional security policies must come before unified security policies

Unified security policies must come before traditional security policies

When a packet matches a traditional security policy, the evaluation process terminates

NO.56 Your network uses a single JSA host and you want to implement a cluster. In this scenario, which two statements are correct? (Choose two.)

The software versions on both primary and secondary hosts

The secondary host can backup multiple JSA primary hosts.

The primary and secondary hosts must be configured with the same storage devices.

The cluster virtual IP will need an unused IP address assigned.

NO.57 Which two statements are true about Juniper ATP Cloud? (Choose two.)

Dynamic analysis is always performed to determine if a file contains malware.

If the cache lookup determines that a file contains malware, performed to verify the results.

Dynamic analysis is not always necessary to determine if a file contains malware.

If the cache lookup determines that a file contains malware, static analysis is not performed to verify the results.

NO.58 You are asked to determine how much traffic a popular gaming application is generating on your network.
Which action will you perform to accomplish this task?

Enable AppQoS on the proper security zones

Enable APBR on the proper security zones

Enable screen options on the proper security zones

Enable AppTrack on the proper security zones.

NO.59 A client has attempted communication with a known command-and-control server and it has reached the configured threat level threshold.
Which feed will the clients IP address be automatically added to in this situation?

the command-and-control cloud feed

the allowlist and blocklist feed

the custom cloud feed

the infected host cloud feed

NO.60 Click the Exhibit button.

You examine the log file shown in the exhibit after running the set security idp active-policy command.
Which two statements are true in this scenario? (Choose two.)

The IDP policy compiled successfully.

The IDP policy loaded successfully.

The IDP hit cache is set to 16384.

The entire configuration was committed.

NO.61 Which two statements describe superflows in Juniper Secure Analytics? (Choose two.)

JSA only supports Type A and Type C superflows.

Superflows can negatively impact licensing limitations.

Disk space usage is reduced on the JSA device.

Superflows combine many flows into a single flow.

NO.62 Click the Exhibit button.

Which two statements are true about the session shown in the exhibit? (Choose two.)

Two security policies are required for bidirectional traffic flow.

The ALG was enabled by manual configuration.

The ALG was enabled by default.

One security policy is required for bidirectional traffic flow.

NO.63 After a software upgrade on an SRX5800 chassis cluster, you notice that both node0 and node1 are in the primary state, when node1 should be secondary. All control and fabric links are operating normally.
In this scenario, which step must you perform to recover the cluster?

Execute the request system reboot command on node1.

Execute the request system software rollback command on node0.

Execute the request system software add command on node1.

Execute the request system reboot command on node0.

NO.64 Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

scheduler

pass-through authentication

ALGs

counters