Free JNCIS-SEC JN0-334 Practice Exam Questions You Should Try

test2022-08-12T03:48:32+00:00

By test JN0-334 free dumps, JN0-334 questions and answers, JN0-334 study guide, JNCIS-SEC JN0-334 Practice Exam Questions, Security, Specialist (JNCIS-SEC) 0 Comments

Passing the JN0-334 test is the best way to become one of the most in-demand professionals in your area. FreeTestShare JNCIS-SEC JN0-334 Practice Exam Questions cover all of the topics covered on the Juniper JN0-334 exam, so you’ll be prepared to pass the real exam. These JNCIS-SEC JN0-334 Practice Exam Questions can help you clear your concerns and prepare for the exam. We ensure that if you use the most accurate JNCIS-SEC JN0-334 Practice Exam Questions from FreeTestShare, you will pass the exam on the first try!

You can now use this free JN0-334 practice test to evaluate your preparation.

Page 1 of 3

1. Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

scheduler

pass-through authentication

ALGs

counters

2. When working with network events on a Juniper Secure Analytics device, flow records come from which source?

tap port

SPAN

switch

mirror

3. Click the Exhibit button.

You have configured your SRX Series device to receive authentication information from a JIMS server. However, the SRX is not receiving any authentication information.

Referring to the exhibit, how would you solve the problem?

Use the JIMS Administrator user interface to add the SRX device as client.

Generate an access token on the SRX device that matches the access token on the JIMS server.

Update the IP address of the JIMS server

Change the SRX configuration to connect to the JIMS server using HTT

4. How many nodes are configurable in a chassis cluster using SRX Series devices?

5. What is the default session timeout value for ICMP and UDP traffic?

30 seconds

30 minutes

60 seconds

5 minutes

6. What are two types of collectors for the JATP core engine? (Choose two.)

SNMP

e-mail

Web

telemetry

7. You are deploying a vSRX into a vSphere environment which applies the configuration from a bootable ISO file containing the juniper.conf file. After the vSRX boots and has the configuration applied, you make additional device specific configuration changes, commit, and reboot the device. Once the device finishes rebooting, you notice the specific changes you made are missing but the original configuration is applied.

In this scenario, what is the problem?

Configuration changes do not persist after reboots on vSR

The juniper.conf file was not applied to the vSR

The configuration file is corrupt.

The ISO file is still mounted on the vSR

8. Click the Exhibit button.

You have configured the scheduler shown in the exhibit to prevent users from accessing certain websites from 1:00 PM to 3:00 PM Monday through Friday. This policy will remain in place until further notice. When testing the policy, you determine that the websites are still accessible during the restricted times.

In this scenario, which two actions should you perform to solve the problem? (Choose two.)

Add the saturday exclude parameter and the sunday exclude parameter to ensure weekends are excluded from the schedule.

Use the 13:00 parameter and the 15:00 parameter when specifying the time.

Use the start-date parameter to specify the date for each Monday and use the stop-date parameter to specify the date for each Friday.

Use the PM parameter when specifying the time in the schedule.

9. Which two statements are correct about server-protection SSP proxy? (Choose two.)

The server-protection SSL proxy intercepts the server certificate.

The server-protection SSL proxy is also known as SSL reverse proxy.

The server-protection SSL proxy forwards the server certificate after modification.

The server-protection SSL proxy acts as the server from the client’s perspective.

10. Click the Exhibit button.

Which two statements describe the output shown in the exhibit? (Choose two.)

Node 0 is passing traffic for redundancy group 1.

Redundancy group 1 experienced an operational failure.

Redundancy group 1 was administratively failed over.

Node 1 is passing traffic for redundancy group1.

Page 2 of 3

11. Which three statements are true about the difference between cSRX-based virtual security deployments and vSRX-based virtual security deployments? (Choose three.)

vSRX provides Layer 2 to Layer 7 secure services and cSRX provides Layer 4 to Layer 7 secure services.

cSRX requires less storage and memory space for a given deployment than vSRX-based solutions.

cSRX-based solutions are more scalable than vSRX-based solutions.

vSRX and cSRX both provide Layer 2 to Layer 7 secure services.

vSRX provides faster deployment time and faster reboots compared to cSR

12. You want to deploy vSRX in Amazon Web Services (AWS) virtual private clouds (VPCs).

Which two statements are true in this scenario? (Choose two.)

The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Network Director instance.

MPLS LSPs can be used to connect vSRXs in different VPCs.

IPsec tunnels can be used to connect vSRX in different VPCs.

The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Security Director instance.

13. 1.Which statement describes the AppTrack module in AppSecure?

The AppTrack module provides enforcement with the ability to block traffic, based on specific applications.

The AppTrack module provides control by the routing of traffic, based on the application.

The AppTrack module identifies the applications that are present in network traffic.

The AppTrack module provides visibility and volumetric reporting of application usage on the network.

14. What are three primary functions of JATP? (Choose three.)

detection

encryption

optimization

analytics

mitigation

15. You must fine tune an IPS security policy to eliminate false positives. You want to create exemptions to the normal traffic examination for specific traffic.

Which two parameters are required to accomplish this task? (Choose two.)

source IP address

destination IP address

destination port

source port

16. Click the Exhibit button.

You are configuring an SRX chassis cluster with the node-specific hostname and management address. Referring to the exhibit, which configuration completes this requirement?

A)

Option A

Option B

Option C

Option D

17. Which default protocol and port are used for JIMS to SRX client communication?

WMI over TCP; port 389

ADSI over TCP; port 389

HTTPS over TCP: port 443

RPC over TCP, port 135

18. You want to use Sky ATP to protect your network; however, company policy does not allow you to send any files to the cloud.

Which Sky ATP feature should you use in this situation?

Only use on-premises local Sky ATP server anti-malware file scanning.

Only use cloud-based Sky ATP file hash lookups.

Only use on-box SRX anti-malware file scanning.

Only use cloud-based Sky ATP file blacklists.

19. Click the Exhibit button.

Which two statements are true about the session shown in the exhibit? (Choose two.)

Two security policies are required for bidirectional traffic flow.

The ALG was enabled by manual configuration.

The ALG was enabled by default.

One security policy is required for bidirectional traffic flow.

20. Click the Exhibit button.

The output shown in the exhibit is displayed in which format?

syslog

WELF

binary

sd-syslog

Page 3 of 3

21. Click the Exhibit button.

Referring to the exhibit, which two devices are considered to be part of the secure fabric site with Policy Enforcer? (Choose two.)

Server-2

SRX-1

Server-1

QFX-1

22. Which two statements describe IPS? (Choose two.)

IPS can be used to prevent future attacks from occurring.

IPS dynamically sends policy changes to SRX Series devices.

IPS inspects up to Layer 4 in the OSI model.

IPS inspects up to Layer 7 in the OSI model.

23. Which two statements describe SSL proxy on SRX Series devices? (Choose two.)

SSL proxy supports TLS version 1.2.

Client-protection is also known as reverse proxy.

SSL proxy is supported when enabled within logical systems.

SSL proxy relies on Active Directory to provide secure communication.