JN0-336 Free test questions - Latest Training Dumps

QUESTION 23
Which two statements about the DNS ALG are correct? (Choose two.)

The DNS ALG supports DDNS.

The DNS ALG supports VPN tunnels.

The DNS ALG performs DNS doctoring.

The DNS ALG does not support NAT.

QUESTION 24
Which three algorithms are used to encrypt IP packets? (Choose three.)

Data Encryption Standard (DES)

Secure Hash Algorithm (SHA) – 1

Message Digest 5 (MD5)

Triple Data Encryption Standard (3DES)

Advanced Encryption Standard (AES)

QUESTION 25
What are two benefits of using a vSRX in a software-defined network? (Choose two.)

scalability

no required software license

granular security

infinite number of interfaces

QUESTION 26
You are experiencing excessive packet loss on one of your two WAN links route traffic from the degraded link to the working link Which AppSecure component would you use to accomplish this task?

AppFW

AppQoE

AppQoS

APBR

QUESTION 27
How does Juniper ATP Cloud protect a network from zero-day threats?

It uses a cache lookup.

It uses antivirus software.

It uses dynamic analysis.

It uses known virus signatures.

QUESTION 28
Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)

Nancy logged in to the juniper.net Active Directory domain.

The IP address of Nancy’s client PC is 172.25.11.

The IP address of the authenticating domain controller is 172.25.11.140.

Nancy is a member of the Active Directory sales group.

QUESTION 29
Which two statements are correct about the fab interface in a chassis cluster? (Choose two.)

Real-time objects (RTOs) are exchanged on the fab interface to maintain session synchronization.

In an active/active configuration, inter-chassis transit traffic is sent over the fab interface.

The fab interface enables configuration synchronization.

Heartbeat signals sent on the fab interface monitor the health of the control plane link.

QUESTION 30
You are implementing an SRX Series device at a branch office that has low bandwidth and also uses a cloud- based VoIP solution with an outbound policy that permits all traffic.
Which service would you implement at your edge device to prioritize VoIP traffic in this scenario?

AppFW

SIP ALG

AppQoE

AppQoS

QUESTION 31
Your company is using the Juniper ATP Cloud free model. The current inspection profile is set at 10 MB You are asked to configure ATP Cloud so that executable files up to 30 MB can be scanned while at the same time minimizing the change in scan time for other file types.
Which configuration should you use in this scenario?

Use the CLI to create a custom profile and increase the scan limit.

Use the ATP Cloud Ul to change the default profile to increase the scan limit for all files to 30 MB.

Use the CLI to change the default profile to increase the scan limit for all files to 30 MB.

Use the ATP Cloud Ul to update a custom profile and increase the scan limit for executable files to 30 MB.

QUESTION 32
Which two statements are correct about a chassis cluster? (Choose two.)

If the cluster ID is set to 0, the HA configuration is ignored.

You must reboot the device anytime you change the node ID configuration.

If the node ID is set to 0, the HA configuration is ignored.

You must have multiple Layer 2 domains if you require more than 255 node IDs.

QUESTION 33
Which two statements are correct about security policy changes when using the policy rematch feature? (Choose two.)

When a policy change includes changing the policy’s action from permit to deny, all existing sessions are maintained

When a policy change includes changing the policy’s source or destination address match condition, all existing sessions are dropped.

When a policy change includes changing the policy’s action from permit to deny, all existing sessions are dropped.

When a policy change includes changing the policy’s source or destination address match condition, all existing sessions are reevaluated.

QUESTION 34
You are asked to implement IPS on your SRX Series device.
In this scenario, which two tasks must be completed before a configuration will work? (Choose two.)

Download the IPS signature database.

Enroll the SRX Series device with Juniper ATP Cloud.

Install the IPS signature database.

Reboot the SRX Series device.

QUESTION 35
Which two statements are correct about IDP policy templates? (Choose two.)

They are provided by Juniper Networks.

They are not customizable.

They are available on a “factory-default config.”

They must be installed.

QUESTION 36
You are asked to set up SSL proxy in SRX Series devices. An SSL proxy profile is already defined for you.
Which two steps are required to complete the setup? (Choose two.)

Enable host-inbound-traffic HTTPS in the security zone in which SSL proxy is referenced.

Reference the SSL proxy profile in a security zone.

Reference the SSL proxy profile in a security policy.

Enable any Layer 7 services in the security policy in which SSL proxy is referenced.

QUESTION 37
How does Juniper’s identity-aware firewall facilitate compliance with security policies and regulations?

by granting access based on user roles or identities

by simplifying the design of the network architecture

by increasing network capacity to accommodate user requirements

by enforcing the need for user confidentiality

QUESTION 38
You are troubleshooting unexpected issues on your JIMS server due to out of order event log timestamps.
Which action should you take to solve this issue?

Enable time synchronization on the client devices.

Enable time synchronization on the SRX Series devices.

Enable time synchronization on the JIMS server.

Enable time synchronization on the domain controllers.

QUESTION 39
You administer a JSA host and want to include a rule that sets a threshold for excessive firewall denies and sends an SNMP trap after receiving related syslog messages from an SRX Series firewall.
Which JSA rule type satisfies this requirement?

common

offense

flow

event

QUESTION 40
You want to configure the SSL proxy feature on your SRX Series Firewall.
Which two actions must you perform to accomplish this task? (Choose two.)

Enable the SSL ALG.

Create an SSL proxy profile.

Create an SSL application object.

Associate an SSL proxy profile with a security policy.

QUESTION 41
When using Adaptive Threat Profiling, which two deployment modes are available on SRX Series devices?
(Choose two.)

bridge

inline

tap

promiscuous

QUESTION 42
What are two ways to help reduce false positives for an IDP rule? (Choose two.)

Change the rule to a lower severity action.

Remove the attack object from the rule.

Create an exempt rule.

Configure a terminal rule at the end of the rule base.

QUESTION 43
When a security policy is modified, which statement is correct about the default behavior for active sessions allowed by that policy?

The active sessions allowed by the policy will be dropped.

Only policy changes that involve modification of the action field will cause the active sessions affected by the change to be dropped.

Only policy changes that involve modification of the application will cause the active sessions affected by the change to be dropped.

The active sessions allowed by the policy will continue unchanged.

QUESTION 44
What are three policy types available in Junos Space Security Director? (Choose three.)

device

local

group

universal

global

QUESTION 45
Which two statements about SRX chassis clustering are correct? (Choose two.)

SRX chassis clustering supports active/passive and active/active for the data plane.

SRX chassis clustering only supports active/passive for the data plane.

SRX chassis clustering supports active/passive for the control plane.

SRX chassis clustering supports active/active for the control plane.

QUESTION 46
You are asked to set up SSL proxy in SRX Series devices. An SSL proxy profile is already defined for you.
Which two steps are required to complete the setup? (Choose two.)

Reference the SSL proxy profile in a security zone.

Reference the SSL proxy profile in a security policy.

Enable host-inbound-traffic HTTPS in the security zone in which SSL proxy is referenced.

Enable any Layer 7 services in the security policy in which SSL proxy is referenced.

QUESTION 47
Exhibit

Referring to the exhibit, which two statements describe the type of proxy used? (Choose two.)

forward proxy

client protection proxy

server protection proxy

reverse proxy

Tag JN0-336 Free test questions

Read Online JN0-336 Test Practice Test Questions Exam Dumps [Q23-Q47]