JN0-334 Exam Questions

Which two solutions provide a sandboxing feature for finding zero-day malware threats? (Choose two.)

The output shown in the exhibit is displayed in which format?

You are using the JIMS Administrator user interface to add multiple SRX client devices. You must share common configuration attributes across the SRX clients without having to re-e...

In an Active/Active chassis cluster deployment, which chassis cluster component is responsible for RG0 traffic?

Your manager asks you to find employees that are watching YouTube during office hours. Which AppSecure component would you configure to accomplish this task?

What are two types of collectors for the JATP core engine? (Choose two.)

You have configured your SRX Series device to receive authentication information from a JIMS server. However, the SRX is not receiving any authentication information. Referring to...

After a software upgrade on an SRX5800 chassis cluster, you notice that both node0 and node1 are in the primary state, when node1 should be secondary. All control and fabric links...

What is the default timeout period for a TCP session in the session table of a Junos security device?

Which security log message format reduces the consumption of CPU and storage?

You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution. Which action would accomplish this ta...

You have implemented SSL proxy client protection. After implementing this feature, your users are complaining about the warning message shown in the exhibit. Which action must you...

You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone. In this scenario, which statement is true?

The DNS ALG performs which three functions? (Choose three.)

When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)

Referring to the SRX Series flow module diagram shown in the exhibit, where is IDP/IPS processed?

The output shown in the exhibit is displayed in which format?

You want to collect events and flows from third-party vendors. Which solution should you deploy to accomplish this task?

Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

You must fine tune an IPS security policy to eliminate false positives. You want to create exemptions to the normal traffic examination for specific traffic. Which two parameters a...

Which two statements describe JSA? (Choose two.)

What is the maximum number of supported interfaces on a vSRX hosted in a VMware environment?

You have deployed JSA and you need to view events and network activity that match rule criteria. You must view this data using a single interface. Which JSA feature should you use...

Which two settings must be enabled on the hypervisor in a vSRX deployment to ensure proper chassis cluster operation? (Choose two.)

Referring to the exhibit, which statement is true?

You want to use Sky ATP to protect your network; however, company policy does not allow you to send any files to the cloud. Which Sky ATP feature should you use in this situation?

Referring to the exhibit, which statement is true?

How many nodes are configurable in a chassis cluster using SRX Series devices?

Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)

What are two management methods for cSRX? (Choose two.)

You are deploying the Junos application firewall feature in your network. In this scenario, which two elements are mapped to applications in the application system cache? (Choose t...

Which two protocols are supported for Sky ATP advanced anti-malware scanning? (Choose two.)

Referring to the exhibit, which two devices are considered to be part of the secure fabric site with Policy Enforcer? (Choose two.)

You are asked to convert two standalone SRX Series devices to a chassis cluster deployment. You must ensure that your IPsec tunnels will be compatibla with the new deployment. In t...

At which step in the packet flow are Junos Screen checks applied?

You need to implement Junos Screen options to protect traffic coming through the ge-0/0/0 and ge-0/0/1 interfaces which are located in the trust and DMZ zones, respectively. Where...

What are two examples of RTOs? (Choose two.)

Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer. To complete this task, where should you configure the default...

You need to have the JATP solution analyzer .jar, .xls, and .doc files. Referring to the exhibit, which two file types must be selected to accomplish this task? (Choose two.)

Which three features are parts of Juniper Networks' AppSecure suite? (Choose three.)

Which two statements are correct about server-protection SSP proxy? (Choose two.)

Which statement is true about high availability (HA) chassis clusters for the SRX Series device?

What are three valid actions for a then statement in a security policy? (Choose three.)

Which two statements are correct regarding reth interfaces? (Choose two.)

What are two types of attack objects used by IPS on SRX Series devices? (Choose two.)

When considering managed sessions, which configuration parameter determines how full the session table must be to implement the early age-out function?

You are asked to improve resiliency for individual redundancy groups in an SRX4600 chassis cluster. Which two features would accomplish this task? (Choose two.)

What are two elements of a custom IDP/IPS attack object? (Choose two.)

Referring to the configuration shown in the exhibit, which two statements are true? (Choose two.)

Your network uses a remote e-mail server that is used to send and receive e-mails for your users. In this scenario, what should you do to protect users from receiving malicious fil...