JN0-336 by Juniper Actual Free Exam Q&As

Question 1

What is a function of the Juniper Identity Management Service?

A. encrypting user e-mail B. encrypting network data traffic C. logging malicious code sent through ingress and egress ports D. maintaining a centralized authentication table

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

You are asked to use Junos Space Security Director to download the latest application signatures in the AppID database.
In this scenario, which two statements are correct? (Choose two.)

A. The AppID database is maintained by a third-party host. B. The AppID database is stored on the managed SRX Series device. C. The AppID database is stored on a local storage server in the management network. D. The AppID database is stored in Junos Space Security Director.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

You have configured a new site-to-site VPN tunnel. The exhibit shows the security IPsec statistics output for the specific tunnel index from one of the tunnel-end devices.

Which two statements are correct in this scenario? (Choose two.)

A. The ESP configuration is not set up correctly. B. The far-end tunnel device is rebooting. C. No traffic passes through this tunnel. D. AH is incorrectly configured.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

What are two properties negotiated during IKE Phase 2? (Choose two.)

A. aggressive mode B. routing protocol C. tunneling protocol D. Perfect Forward Secrecy

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

Which two statements about PC probes sent by the JIMS server are correct? (Choose two.)

A. If a probe is successful, the authentication entry is updated on the JIMS server and pushed to the SRX. B. PC probes are sent by the JIMS server to domain PCs every 60 seconds. C. PC probes are sent by the JIMS server to domain PCs every 30 seconds. D. PC probes are triggered only when there is no IP-to-username mapping present in the event log.

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

You are asked to set up SSL proxy in SRX Series devices. An SSL proxy profile is already defined for you.
Which two steps are required to complete the setup? (Choose two.)

A. Enable any Layer 7 services in the security policy in which SSL proxy is referenced. B. Reference the SSL proxy profile in a security zone. C. Reference the SSL proxy profile in a security policy. D. Enable host-inbound-traffic HTTPS in the security zone in which SSL proxy is referenced.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

You work on the security operations team that manages firewalls only. In your data center, there are two SRX chassis clusters. These clusters operate on VLAN 1042. The network team advises you that they see the same MAC address coming from both chassis clusters for reth0.
Why is this occurring?

A. RGO is active on both node0 and node1 due to split-brain. B. Chassis clusters must be on separate VLANs. C. The same cluster ID was used on both clusters. D. Link Aggregation Control Protocol is not synchronized.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Juniper Security, Specialist (JNCIS-SEC) - JN0-336 Exam Practice Test