JN0-334 Exam Questions
100 real JN0-334 exam questions with expert-verified answers and explanations. Page 2 of 2.
- Question #51
Which two statements are true about virtualized SRX Series devices? (Choose two.)
- Question #52
You are asked to establish an IPsec VPN between two sites. You are also required to establish an OSPFv2 adjacency across this VPN.
- Question #53
You are building a VPN tunnel between two SRX Series devices. You want the tunnel to always be established, even if there is no traffic to send. Which action would be used to achie...
- Question #54
A routing change occurs on an SRX Series device that involves choosing a new egress interface. In this scenario, which statement is true for all affected current sessions?
- Question #55
What information does JIMS collect from domain event log sources? (Choose two.)
- Question #56
Which statement describes the AppTrack module in AppSecure?
- Question #57
Which two statements describe the output shown in the exhibit? (Choose two.)
- Question #58
Which statement is true about JATP incidents?
- Question #60
You must ensure that all encrypted traffic passing through your SRX device uses strong protocols and ciphers. Which feature should you implement to satisfy this requirement?
- Question #61
What is the default timeout for a TCP session on an SRX Series device?
- Question #62
Which two are negotiated during Phase 2 of an IPsec VPN tunnel establishment? (Choose two.)
- Question #63
You want to deploy vSRX in Amazon Web Services (AWS) virtual private clouds (VPCs). Which two statements are true in this scenario? (Choose two.)
- Question #64
Which two statements are true about the configuration shown in the exhibit? (Choose two.)
- Question #65
Which feature supports sandboxing of zero-day attacks?
- Question #66
Which two statements describe how rules are used with Juniper Secure Analytics? (Choose two.)
- Question #67
Which solution should you use if you want to detect known attacks using signature-based methods?
- Question #68
You want to show interface-specific zone information and statistics. Which operational command would be used to accomplish this?
- Question #69
You have just configured source NAT with a pool of addresses within the same subnet as the egress interface. What else must be configured to make the addresses in the pool usable?
- Question #70
The AppQoE module of AppSecure provides which function?
- Question #71
You are configuring a client-protection SSL proxy profile. Which statement is correct in this scenario?
- Question #72
Which two statements describe application-layer gateways (ALGs)? (Choose two.)
- Question #73
What is the default session timeout value for ICMP and UDP traffic?
- Question #74
What are two valid JIMS event log sources? (Choose two.)
- Question #75
You must configure JSA to accept events from an unsupported third-party log source. In this scenario, what should you do?
- Question #76
Which of the following lists the correct order that the Sky ATP pipeline evaluates traffic?
- Question #77Troubleshooting
Which two session parameters would be used to manage space on the session table? (Choose two.)
session tablehigh watermarklow watermarkSRX - Question #78
Click the Exhibit button. You examine the log file shown in the exhibit after running the set security idp active-policy command. Which two statements are true in this scenario? (C...
- Question #79Troubleshooting
Click the Exhibit button. You have configured the scheduler shown in the exhibit to prevent users from accessing certain websites from 1:00 PM to 3:00 PM Monday through Friday. Thi...
scheduler configurationtime-based policyURL filteringSRX - Question #80Troubleshooting
After performing a software upgrade on an SRX5800 chassis cluster, you notice that node1 is in the primary state and node0 is in the backup state. Your network standards dictate th...
chassis clusterfailoverredundancy groupSRX5800 - Question #81
Click the Exhibit button. Which two statements are true about the session shown in the exhibit? (Choose two.)
- Question #82
Which two statements describe superflows in Juniper Secure Analytics? (Choose two.)
- Question #83
Which three statements are true about the difference between cSRX-based virtual security deployments and vSRX-based virtual security deployments? (Choose three.)
- Question #84Troubleshooting
You are deploying a vSRX into a vSphere environment which applies the configuration from a bootable ISO file containing the juniper.conf file. After the vSRX boots and has the conf...
vSRXISO bootconfiguration persistencevSphere - Question #85Troubleshooting
When working with network events on a Juniper Secure Analytics device, flow records come from which source?
JSAflow recordsSPANnetwork events - Question #86
You are troubleshooting advanced policy-based routing (APBR). Which two actions should you perform in this scenario? (Choose two.)
- Question #87
Which two statements describe SSL proxy on SRX Series devices? (Choose two.)
- Question #88Troubleshooting
Click the Exhibit button. Referring to the exhibit, which two values in the JIMS SRX client configuration must match the values configured on the SRX client? (Choose two.)
JIMSSRX clientClient IDClient Secret - Question #89
Which two statements apply to policy scheduling? (Choose two.)
- Question #90
Click the Exhibit button. You have deployed Sky ATP to protect your network from attacks so that users are unable to download malicious files. However, after a user attempts to dow...
- Question #91
Which default protocol and port are used for JIMS to SRX client communication?
- Question #92Troubleshooting
Which statement about the control link in a chassis cluster is correct?
chassis clustercontrol linkredundant linksSRX - Question #93Troubleshooting
Data plane logging operates in which two modes? (Choose two.)
data plane loggingevent modestream modeSRX logging - Question #94
Where is AppSecure executed in the flow process on an SRX Series device?
- Question #95
Which two statements about JIMS high availability are true? (Choose two.)
- Question #96Troubleshooting
What is the correct step sequence used when Sky ATP analyzes a file?
Sky ATPfile analysiscache lookupthreat detection - Question #97
Which two statements describe IPS? (Choose two.)
- Question #98
You must deploy AppSecure in your network to block risky applications. In this scenario, which two AppSecure features are required? (Choose two.)
- Question #99
What are three primary functions of JATP? (Choose three.)
- Question #100Wired Assurance
You want to support reth LAG interfaces on a chassis cluster. What must be enabled on the interconnecting switch to accomplish this task?
reth interfaceLAG802.3adchassis cluster - Question #101Troubleshooting
Which three statements are correct about fabric interfaces on the SRX5800? (Choose three.)
fabric interfacesSRX5800chassis clustersystem-assigned