JN0-336 Exam Questions
103 real JN0-336 exam questions with expert-verified answers and explanations. Page 2 of 3.
- Question #51Juniper Advanced Threat Prevention (ATP)
Which two statements are true about Juniper ATP Cloud? (Choose two.)
ATP Clouddynamic analysisstatic analysiscache lookup malware - Question #52Additional Security Services
Your network uses a single JSA host and you want to implement a cluster. In this scenario, which two statements are correct? (Choose two.)
JSA clusteringprimary secondary hostvirtual IPJSA HA - Question #53SSL Proxy
Exhibit Referring to the exhibit, which two statements describe the type of proxy used? (Choose two.)
SSL proxyforward proxyreverse proxyclient server protection - Question #54Identity-Aware Security Policies
Which solution enables you to create security policies that include user and group information?
JIMSuser-based policyidentity-aware securityuser group matching - Question #55Additional Security Services
Which two statements are correct about JSA data collection? (Choose two.)
JSA data collectionEvent CollectorFlow Collectorlog parsing - Question #56Security Zones, Policies, and Objects
Exhibit You are asked to ensure that servers running the Ubuntu OS will not be able to update automatically by blocking their access at the SRX firewall. You have configured a unif...
unified security policypolicy troubleshootingapplication identificationHTTPS blocking - Question #57Intrusion Detection and Prevention (IDP)
Which two statements are correct when considering IPS rule base evaluation? (Choose two.)
IPS rule evaluationsequential evaluationrule action prioritymultiple rule match - Question #58Security Zones, Policies, and Objects
You are configuring logging for a security policy. In this scenario, in which two situations would log entries be generated? (Choose two.)
security policy loggingsession-initsession-closelog triggers - Question #59Application Security
You are asked to block malicious applications regardless of the port number being used. In this scenario, which two application security features should be used? (Choose two.)
AppFWAPPIDport-agnostic blockingapplication-based policy - Question #60Security Zones, Policies, and Objects
Which two statements are correct about security policy changes when using the policy rematch feature? (Choose two.)
policy rematchexisting sessionspolicy action changesession reevaluation - Question #61High Availability (HA) Clustering
Exhibit Referring to the exhibit, what do you determine about the status of the cluster.
chassis clusternode statuscluster monitoringHA failover - Question #62Juniper Advanced Threat Prevention (ATP)
Which two statements are correct about Juniper ATP Cloud? (Choose two.)
ATP Cloudthreat levelsthreat scoringdwell time - Question #63High Availability (HA) Clustering
Which two statements about SRX chassis clustering are correct? (Choose two.)
chassis clusteringactive/passiveactive/activecontrol plane - Question #64Juniper Advanced Threat Prevention (ATP)
Which method does the loT Security feature use to identify traffic sourced from IoT devices?
IoT securitydevice identificationmetadata extractionATP Cloud - Question #65Additional Security Services
You want to set up JSA to collect network traffic flows from network devices on your network. Which two statements are correct when performing this task? (Choose two.)
JSAtraffic flowssuperflowsstatistical sampling - Question #66SRX Series Devices and Packet Flow
Which two statements are true about the vSRX? (Choose two.)
vSRXVMXNET3Linux base OSvirtual firewall - Question #67Application Security
Which two statements are correct about App Track? (Choose two.)
AppTracktraffic flow statisticslogical systemapplication visibility - Question #68SSL Proxy
Click the Exhibit button. You have implemented SSL client protection proxy. Employees are receiving the error shown in the exhibit. How do you solve this problem?
SSL client proxyCA certificatecertificate trustclient configuration - Question #69Security Zones, Policies, and Objects
When a security policy is modified, which statement is correct about the default behavior for active sessions allowed by that policy?
security policyactive sessionspolicy modificationsession continuity - Question #70Juniper Advanced Threat Prevention (ATP)
On an SRX Series firewall, what are two ways that Encrypted Traffic Insights assess the threat of the traffic? (Choose two.)
Encrypted Traffic Insightscertificate validationconnection timingthreat assessment - Question #71SRX Series Devices and Packet Flow
Click the Exhibit button. You are validating the configuration template for device access. The commands in the exhibit have been entered to secure IP access to an SRX Series device...
firewall filterloopback interfacedevice accessIP access control - Question #72High Availability (HA) Clustering
Click the Exhibit button. Which two statements describe the output shown in the exhibit? (Choose two.)
redundancy groupadministrative failoverchassis clusternode failover - Question #73Application Security
What are two requirements for enabling AppQoE? (Choose two.)
AppQoEAPPID licenseSRX endpointsMX Series - Question #74Juniper Advanced Threat Prevention (ATP)
How does Juniper ATP Cloud protect a network from zero-day threats?
ATP Cloudzero-day threatsdynamic analysissandboxing - Question #75Juniper Advanced Threat Prevention (ATP)
Click the Exhibit button. Referring to the exhibit, what will the SRX Series device do in this configuration?
infected hoststhreat level thresholdsecurity policy actionATP Cloud - Question #76High Availability (HA) Clustering
You want to control when cluster failovers occur. In this scenario, which two specific parameters would you configure on an SRX Series device? (Choose two.)
heartbeat intervalheartbeat thresholdfailover controlchassis cluster - Question #77Additional Security Services
You administer a JSA host and want to include a rule that sets a threshold for excessive firewall denies and sends an SNMP trap after receiving related syslog messages from an SRX...
JSAoffense ruleSNMP trapfirewall deny threshold - Question #78SRX Series Devices and Packet Flow
Which two statements about the DNS ALG are correct? (Choose two.)
DNS ALGDNS doctoringVPN tunnelNAT - Question #79Identity-Aware Security Policies
You are troubleshooting unexpected issues on your JIMS server due to out of order event log timestamps. Which action should you take to solve this issue?
JIMStime synchronizationevent log timestampsdomain controllers - Question #80SRX Series Devices and Packet Flow
Which statement defines the function of an Application Layer Gateway (ALG)?
ALGapplication layer gatewayprotocol managementpacket inspection - Question #81Juniper Advanced Threat Prevention (ATP)
Which two statements are true about Juniper ATP Cloud? (Choose two.)
ATP Cloudantivirus engineszero-day threatsfile analysis - Question #82High Availability (HA) Clustering
Which two statements about SRX Series device chassis clusters are correct? (Choose two.)
chassis clusterdata planerevenue portscluster sizing - Question #83Intrusion Detection and Prevention (IDP)
Which two statements are correct about the Junos IPS feature? (Choose two.)
IPSSRX integrationprotocol anomalyunknown attack detection - Question #84Juniper Advanced Threat Prevention (ATP)
Click the Exhibit button. You are asked to create a security policy that will automatically add infected hosts to the infected hosts feed and block further communication through th...
security intelligence policyinfected hosts feedsecurity policy actionATP integration - Question #85SRX Series Devices and Packet Flow
You are preparing a proposal for a new customer who has submitted the following requirements for a vSRX deployment: -- globally distributed, -- rapid provisioning, -- scale based o...
vSRXcloud deploymentAWSvirtual firewall - Question #86SRX Series Devices and Packet Flow
On which three Hypervisors is vSRX supported? (Choose three.)
vSRXhypervisor supportKVMvirtualization platforms - Question #87Security Zones, Policies, and Objects
Which two statements are correct about a policy scheduler? (Choose two.)
policy schedulertime-based policydaily schedulepolicy activation - Question #88Additional Security Services
You want to be alerted if the wrong password is used more than three times on a single device within five minutes. Which Juniper Networks solution will accomplish this task?
Juniper Secure AnalyticsSIEMauthentication monitoringbrute force detection - Question #89Security Zones, Policies, and Objects
While working on an SRX firewall, you execute the show security policies policy-name <name> detail command. Which function does this command accomplish?
security policyCLI commandspolicy countersoperational mode - Question #90Identity-Aware Security Policies
Your JIMS server is unable to view event logs. Which two actions would you take to solve this issue? (Choose two.)
JIMSevent log managementWindows Firewalldomain controllers - Question #91High Availability (HA) Clustering
Which two statements are correct about the fab interface in a chassis cluster? (Choose two.)
fab interfaceRTO synchronizationinter-chassis transitsession sync - Question #92High Availability (HA) Clustering
Which two statements are correct about a reth LAG? (Choose two.)
reth interfaceLAGlink aggregationchassis cluster - Question #93Application Security
Which two statements are true about application identification? (Choose two.)
application identificationnested applicationsLayer 7AppID signatures - Question #94SRX Series Devices and Packet Flow
Which sequence does an SRX Series device use when implementing stateful session security policies using Layer 3 routes?
packet flowroute lookupsecurity policy lookupstateful inspection - Question #95Security Zones, Policies, and Objects
You want to show tabular data for operational mode commands. In this scenario, which logging parameter will provide this function?
policy counterslogging parametersoperational commandstabular output - Question #96SRX Series Devices and Packet Flow
You need to deploy an SRX Series device in your virtual environment. In this scenario, what are two benefits of using a CSRX? (Choose two.)
cSRXcontainer firewallvirtual deploymentsecurity services - Question #97Application Security
You are implementing an SRX Series device at a branch office that has low bandwidth and also uses a cloud-based VoIP solution with an outbound policy that permits all traffic. Whic...
AppQoSVoIP prioritizationapplication-based QoSbandwidth management - Question #98Juniper Advanced Threat Prevention (ATP)
Which two functions does Juniper ATP Cloud perform to reduce delays in the inspection of files? (Choose two.)
ATP Cloudallowlistcache lookupinspection optimization - Question #99High Availability (HA) Clustering
On an SRX5800, which port is used for chassis cluster out-of-band management?
SRX5800chassis clusterout-of-band managementmanagement port - Question #100Application Security
Click the Exhibit button. Which two statements about the log output shown in the exhibit are correct? (Choose two)
AppTrackapplication trackinglog analysissecurity zones