JN0-336 Exam Questions

A client has attempted communication with a known command-and-control server and it has reached the configured threat level threshold. Which feed will the clients IP address be aut...

Exhibit When trying to set up a server protection SSL proxy, you receive the error shown. What are two reasons for this error? (Choose two.)

You are asked to reduce the load that the JIMS server places on your Which action should you take in this situation?

Exhibit You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172 25.11.0/24 subnet to the Internet You create a policy n...

What are two types of system logs that Junos generates? (Choose two.)

You are asked to ensure that if the session table on your SRX Series device gets close to exhausting its resources, that you enforce a more aggress.ve age-out of existing flows. In...

Exhibit Referring to the exhibit which statement is true?

When a security policy is deleted, which statement is correct about the default behavior of active sessions allowed by that policy?

You want to use IPS signatures to monitor traffic. Which module in the AppSecure suite will help in this task?

Exhibit Using the information from the exhibit, which statement is correct?

After JSA receives external events and flows, which two steps occur? (Choose two.)

Your company is using the Juniper ATP Cloud free model. The current inspection profile is set at 10 MB You are asked to configure ATP Cloud so that executable files up to 30 MB can...

What are two benefits of using a vSRX in a software-defined network? (Choose two.)

You enable chassis clustering on two devices and assign a cluster ID and a node ID to each device. In this scenario, what is the correct order for rebooting the devices?

Exhibit Referring to the exhibit, which two statements are true? (Choose two.)

Which three statements about SRX Series device chassis clusters are true? (Choose three.)

Which two devices would you use for DDoS protection with Policy Enforcer? (Choose two.)

You have implemented a vSRX in your VMware environment. You want to implement a second vSRX Series device and enable chassis clustering. Which two statements are correct in this sc...

Which two statements are true about the fab interface in a chassis cluster? (Choose two.)

You want to manually failover the primary Routing Engine in an SRX Series high availability cluster pair. Which step is necessary to accomplish this task?

How does the SSL proxy detect if encryption is being used?

Which two types of SSL proxy are available on SRX Series devices? (Choose two.)

What are three capabilities of AppQoS? (Choose three.)

You are asked to find systems running applications that increase the risks on your network. You must ensure these systems are processed through IPS and Juniper ATP Cloud for malwar...

Which statement about security policy schedulers is correct?

Exhibit Referring to the SRX Series flow module diagram shown in the exhibit, where is application security processed?

What information does encrypted traffic insights (ETI) use to notify SRX Series devices about known malware sites?

Your manager asks you to provide firewall and NAT services in a private cloud. Which two solutions will fulfill the minimum requirements for this deployment? (Choose two.)

You want to deploy a virtualized SRX in your environment. In this scenario, why would you use a vSRX instead of a cSRX? (Choose two.)

Regarding static attack object groups, which two statements are true? (Choose two.)

Which statement regarding Juniper Identity Management Service (JIMS) domain PC probes is true?

Exhibit Which two statements are correct about the configuration shown in the exhibit? (Choose two.)

Which two statements are true about the vSRX? (Choose two.)

Which two statements about SRX Series device chassis clusters are true? (Choose two.)

Which two statements are correct about SSL proxy server protection? (Choose two.)

Which two statements are true about mixing traditional and unified security policies? (Choose two.)

You are asked to create an IPS-exempt rule base to eliminate false positives from happening. Which two configuration parameters are available to exclude traffic from being examined...

You are asked to determine how much traffic a popular gaming application is generating on your network. Which action will you perform to accomplish this task?

Exhibit You just finished setting up your command-and-control (C&C) category with Juniper ATP Cloud. You notice that all of the feeds have zero objects in them. Which statement is...

You have deployed an SRX300 Series device and determined that files have stopped being scanned. In this scenario, what is a reason for this problem?

Which two statements about unified security policies are correct? (Choose two.)

You are asked to implement IPS on your SRX Series device. In this scenario, which two tasks must be completed before a configuration will work? (Choose two.)

You want to permit access to an application but block application sub. Which two security policy features provide this capability? (Choose two.)

You are deploying a new SRX Series device and you need to log denied traffic. In this scenario, which two policy parameters are required to accomplish this task? (Choose two.)

Exhibit You are asked to track BitTorrent traffic on your network. You need to automatically add the workstations to the High_Risk_Workstations feed and the servers to the BitTorre...

Which two statements are correct about the cSRX? (Choose two.)

Which two statements are correct about chassis clustering? (Choose two.)

Which two features are configurable on Juniper Secure Analytics (JSA) to ensure that alerts are triggered when matching certain criteria? (Choose two.)

Which two sources are used by Juniper Identity Management Service (JIMS) for collecting username and device IP addresses? (Choose two.)

You are experiencing excessive packet loss on one of your two WAN links route traffic from the degraded link to the working link Which AppSecure component would you use to accompli...