JN0-335 by Juniper Actual Free Exam Q&As

Question 1

You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172 25.11.0/24 subnet to the Internet. You create a policy named permit-http between the trust and untrust zones that permits HTTP traffic. When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.
Which two actions would correct the error? (Choose two.)

A. Modify the security policy to use the built-in Junos-http applications. B. Create a custom application named http at the [edit applications] hierarchy. C. Issue the rollback 1 command from the top of the configuration hierarchy and attempt the commit again. D. Execute the Junos commit full command to override the error and apply the configuration.

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

You enable chassis clustering on two devices and assign a cluster ID and a node ID to each device. In this scenario, what is the correct order for rebooting the devices?

A. Reboot only the primary device since the secondary will assign itself the correct cluster and node ID. B. Reboot only the secondary device since the primary will assign itself the correct cluster and node ID. C. Reboot the secondary device, then the primary device. D. Reboot the primary device, then the secondary device.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

When considering managed sessions, which configuration parameter determines how full the session table must be to implement the early age-out function?

A. low watermark B. session service timeout C. high waremark D. policy rematch

Discussion 0

Correct Answer: C Vote an answer

Question 4

You want to support reth LAG interfaces on a chassis cluster. What must be enabled on the interconnecting switch to accomplish this task?

A. 802.3ad B. LLDP C. swfab D. RSTP

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

Which two statements describe how rules are used with Juniper Secure Analytics? (Choose two.)

A. When a rule is triggered, JSA can respond by blocking all traffic from a specific source address. B. Rules are defined on Junos Space Security Director, and then pushed to JSA log collectors. C. When a rule is triggered, JSA can respond by sending an e-mail to JSA administrators. D. A rule defines matching criteria and actions that should be taken when an events matches the rule.

Discussion 0

Correct Answer: C,D Vote an answer

Question 6

Which two statements describe application-layer gateways (ALGs)? (Choose two.)

A. ALGs are used with protocols that use multiple ports. B. ALGs are designed for specific protocols that use a single TCP session. C. ALGs are designed for specific protocols that require multiple sessions. D. ALGs can only be configured using Security Director.

Discussion 0

Correct Answer: A,C Vote an answer

Question 7

You are asked to ensure that if the session table on your SRX Series device gets close to exhausting its resources, that you enforce a more aggress.ve age-out of existing flows. In this scenario, which two statements are correct? (Choose two.)

A. The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the low-watermark value is met. B. The high-watermark configuration specifies the percentage of how much of the session table is left before disabling a more aggressive age- out timer. C. The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the high-watermark value is met. D. The high-watermark configuration specifies the percentage of how much of the session table can be allocated before applying a more aggressive age-out timer

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 8

You want to deploy vSRX in Amazon Web Services (AWS) virtual private clouds (VPCs).
Which two statements are true in this scenario? (Choose two.)

A. The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Network Director instance. B. IPsec tunnels can be used to connect vSRX in different VPCs. C. MPLS LSPs can be used to connect vSRXs in different VPCs. D. The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Security Director instance.

Discussion 0

Correct Answer: B,D Vote an answer

Juniper Security, Specialist (JNCIS-SEC) - JN0-335 Exam Practice Test