You want to deploy a virtualized SRX in your environment.In this scenario, why would you use a vSRX instead of a cSRX? (Choose two.)

The vSRX supports Layer 2 and Layer 3 configurations.

The vSRX has faster boot times.

The vSRX supports Layer 2 and Layer 3 configurations.

Only the vSRX provides clustering.

The vSRX has faster boot times.

Only the vSRX provides NAT, IPS, and UTM services

Exhibit Referring to the exhibit, which two statements are true? (Choose two.)

The IP address of the authenticating domain controller is 172.25.11.140.

Nancy logged in to the juniper.net Active Directory domain.

The IP address of Nancy's client PC is 172.25.11.

The IP address of the authenticating domain controller is 172.25.11.140.

Nancy is a member of the Active Directory sales group.

Which method does the loT Security feature use to identify traffic sourced from IoT devices?

The SRX Series device identifies loT devices from metadata extracted from their transit traffic.

The SRX Series device streams metadata from the loT device transit traffic to Juniper ATP Cloud Juniper ATP Cloud.

The SRX Series device streams transit traffic received from the IoT device to Juniper ATP Cloud.

The SRX Series device identifies loT devices using their MAC address.

The SRX Series device identifies loT devices from metadata extracted from their transit traffic.

Which two statements are true about the fab interface in a chassis cluster? (Choose two.)

The physical interface for the fab link must be specified in the configuration.

The fab link supports traditional interface features.

The fab link does not support fragmentation.

The physical interface for the fab link must be specified in the configuration.

The fab link supports traditional interface features.

The Junos OS supports only one fab link.

After JSA receives external events and flows, which two steps occur? (Choose two.)

Before formatting the data, the data is analyzed for relevant information.

Before the information is filtered, the information is formatted

After formatting the data, the data is stored in an asset database.

Before formatting the data, the data is analyzed for relevant information.

Before the information is filtered, the information is formatted

After the information is filtered, JSA responds with active measures

Which two statements are correct about SSL proxy server protection? (Choose two.)

You must load the server certificates on the SRX Series device.

The servers must be configured to use the SSL proxy function on the SRX Series device.

You do not need to configure the servers to use the SSL proxy the function on the SRX Series device.

You must load the server certificates on the SRX Series device.

The servers must be configured to use the SSL proxy function on the SRX Series device.

You must import the root CA on the servers.

Which two statements are correct about chassis clustering? (Choose two.)

The node ID value ranges from 1 to 255.

The node ID is used to identify each device in the chassis cluster.

The node ID value ranges from 1 to 255.

The node ID is used to identify each device in the chassis cluster.

A system reboot is required to activate changes to the cluster.

The cluster ID is used to identify each device in the chassis cluster.

Which two statements are correct about JSA data collection? (Choose two.)

The Flow Collector can use statistical sampling

The Event Collector parses logs

The Event Collector collects information using BGP FlowSpec.

The Flow Collector can use statistical sampling

The Flow Collector parses logs.

The Event Collector parses logs

Exhibit Which two statements are correct about the configuration shown in the exhibit? (Choose two.)

The others 300 parameter means unidentified traffic flows will be dropped in 300 milliseconds.

Every session that enters the SRX Series device will generate an event

The session-class parameter in only used when troubleshooting.

The others 300 parameter means unidentified traffic flows will be dropped in 300 milliseconds.

Every session that enters the SRX Series device will generate an event

Replacing the session-init parameter with session-lose will log unidentified flows.

Your company is using the Juniper ATP Cloud free model. The current inspection profile is set at 10 MB You are asked to configure ATP Cloud so that executable files up to 30 MB can be scanned while at the same time minimizing the change in scan time for other file types.Which configuration should you use in this scenario?

Use the ATP Cloud Ul to update a custom profile and increase the scan limit for executable files to 30 MB.

Use the CLI to create a custom profile and increase the scan limit.

Use the ATP Cloud Ul to change the default profile to increase the scan limit for all files to 30 MB.

Use the CLI to change the default profile to increase the scan limit for all files to 30 MB.

Use the ATP Cloud Ul to update a custom profile and increase the scan limit for executable files to 30 MB.

Exhibit When trying to set up a server protection SSL proxy, you receive the error shown. What are two reasons for this error? (Choose two.)

The SSL proxy certificate ID is part of a blocklist.

The SSL proxy certificate ID does not exist.

The SSL proxy certificate ID is part of a blocklist.

The SSL proxy certificate ID does not have the correct renegotiation option set.

The SSL proxy certificate ID is for a forwarding proxy.

The SSL proxy certificate ID does not exist.

Which two statements are true about Juniper ATP Cloud? (Choose two.)

Dynamic analysis is not always necessary to determine if a file contains malware.

If the cache lookup determines that a file contains malware, static analysis is not performed to verify the results.

Dynamic analysis is always performed to determine if a file contains malware.

If the cache lookup determines that a file contains malware, performed to verify the results.

Dynamic analysis is not always necessary to determine if a file contains malware.

If the cache lookup determines that a file contains malware, static analysis is not performed to verify the results.

Which statement about security policy schedulers is correct?

Multiple policies can use the same scheduler.

A policy can have multiple schedulers.

When the scheduler is disabled, the policy will still be available.

A policy without a defined scheduler will not become active

You are asked to ensure that if the session table on your SRX Series device gets close to exhausting its resources, that you enforce a more aggress.ve age-out of existing flows.In this scenario, which two statements are correct? (Choose two.)

The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the high-watermark value is met.

The high-watermark configuration specifies the percentage of how much of the session table can be allocated before applying a more aggressive age-out timer

The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the low-watermark value is met.

The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the high-watermark value is met.

The high-watermark configuration specifies the percentage of how much of the session table is left before disabling a more aggressive age- out timer.

The high-watermark configuration specifies the percentage of how much of the session table can be allocated before applying a more aggressive age-out timer

Which two sources are used by Juniper Identity Management Service (JIMS) for collecting username and device IP addresses? (Choose two.)

Active Directory domain controller event logs

Microsoft Exchange Server event logs

Active Directory domain controller event logs

Exhibit Referring to the exhibit which statement is true?

SSL proxy leverages pre-match result

SSL proxy functions will ignore the session.

SSL proxy leverages post-match results.

SSL proxy must wait for return traffic for the final match to occur.

SSL proxy leverages pre-match result

Which two statements about SRX Series device chassis clusters are true? (Choose two.)

Each chassis cluster member requires a unique cluster ID value.

Each chassis cluster member device can host active redundancy groups

Redundancy group 0 is only active on the cluster backup node.

Each chassis cluster member requires a unique cluster ID value.

Each chassis cluster member device can host active redundancy groups

Chassis cluster member devices must be the same model.

Which two statements are correct about the cSRX? (Choose two.)

The cSRX supports firewall, NAT, IPS, and UTM services.

The cSRX has three default zones: trust, untrust, and management

The cSRX supports firewall, NAT, IPS, and UTM services.

The cSRX only supports Layer 2 'bump-in-the-wire' deployments.

The cSRX supports BGP, OSPF. and IS-IS routing services.

The cSRX has three default zones: trust, untrust, and management

You want to set up JSA to collect network traffic flows from network devices on your network.Which two statements are correct when performing this task? (Choose two.)

BGP FlowSpec is used to collect traffic flows from Junos OS devices.

Statistical sampling decreases event correlation accuracy.

BGP FlowSpec is used to collect traffic flows from Junos OS devices.

Statistical sampling increases processor utilization

Statistical sampling decreases event correlation accuracy.

Superflows reduce traffic licensing requirements.

Click the Exhibit button. Referring to the exhibit, what will the SRX Series device do in this configuration?

Packets from the infected hosts with a threat level of 8 or above will be dropped and no log message will be generated.

Packets from the infected hosts with a threat level of 8 will be dropped and a log message will be generated.

Packets from the infected hosts with a threat level of 8 or above will be dropped and a log message will be generated.

Packets from the infected hosts with a threat level of 8 or above will be dropped and no log message will be generated.

Packets from the infected hosts with a threat level of 8 will be dropped and no log message will be generated.

Which two statements are correct about a reth LAG? (Choose two.)

Links must have the same speed and duplex setting.

You should have two or more interfaces.

Links must have the same speed and duplex setting.

Links must use the same cable type

You must have a 'minimum-links' statement value of two.

You should have two or more interfaces.

Which two statements are true about application identification? (Choose two.)

Application identification can identity nested applications that are within Layer 7.

Application signatures are not the same as IDP signatures.

Application identification can identity nested applications that are within Layer 7.

Application identification cannot identify nested applications that are within Layer 7.

Application signatures are the same as IDP signatures.

Application signatures are not the same as IDP signatures.

Which sequence does an SRX Series device use when implementing stateful session security policies using Layer 3 routes?

An SRX Series device will conduct a longest-match Layer 3 route table lookup before performing a security policy search.

An SRX Series device will perform a security policy search before conducting a longest-match Layer 3 route table lookup.

An SRX Series device performs a security policy search before implementing an ALG security check on the longest-match Layer 3 route.

An SRX Series device will conduct a longest-match Layer 3 route table lookup before performing a security policy search.

An SRX Series device conducts an ALG security check on the longest-match route before performing a security policy search.

You need to deploy an SRX Series device in your virtual environment.In this scenario, what are two benefits of using a CSRX? (Choose two.)

The cSRX supports firewall, NAT, IPS, and UTM services.

The cSRX has low memory requirements.

The cSRX supports Layer 2 and Layer 3 deployments.

The cSRX default configuration contains three default zones: trust, untrust, and management.

The cSRX supports firewall, NAT, IPS, and UTM services.

The cSRX has low memory requirements.

Juniper JN0-335 Practice Test 2 - Free Online Exam Prep & Questions

Exhibit

Juniper JN0-335 image Question 41 50539 09182024211155000000

Referring to the SRX Series flow module diagram shown in the exhibit, where is application security processed?

Forwarding Lookup

Services ALGs

Security Policy

Screens

Comment (0)

Juniper JN0-335 Practice Test 2

Question

Juniper JN0-335 Practice Tests

Practice Tests