Juniper JN0-335 Exam Practice Test Instant Access

Question 1

Which statement regarding Juniper Identity Management Service (JIMS) domain PC probes is true?

AJIMS domain PC probes analyze domain controller security event logs at60-mmute intervals by default.

BJIMS domain PC probes are triggered if no username to IP address mapping is found in the domain security event log.

CJIMS domain PC probes are triggered to map usernames to group membership information.

DJIMS domain PC probes are initiated by an SRX Series device to verify authentication table information.

Answer : B

Juniper Identity Management Service (JIMS) domain PC probes are used to map usernames to IP addresses in the domain security event log. This allows for the SRX Series device to verify authentication table information, such as group membership. The probes are triggered whenever a username to IP address mapping is not found in the domain security event log. By default, the probes are executed at 60-minute intervals.

Question 2

You are asked to reduce the load that the JIMS server places on your Which action should you take in this situation?

AConnect JIMS to the RADIUS server

BConnect JIMS to the domain Exchange server

CConnect JIMS to the domain SQL server.

DConnect JIMS to another SRX Series device.

Answer : D

JIMS serveris aJuniper Identity Management Servicethat collects user identity information from different authentication sources for SRX Series devices12.It can connect to SRX Series devices and CSO platform in your network1.

JIMS server is a service that protects corporate resources by authenticating and restricting user access based on roles2.It connects to SRX Series devices and CSO platform to provide identity information for firewall policies1.To reduce the load that JIMS server places on your network, you should connect JIMS to another SRX Series device1. This way, you can distribute the identity information among multiple SRX Series devices and reduce network traffic.

Question 3

Which two statements about unified security policies are correct? (Choose two.)

AUnified security policies require an advanced feature license.

BUnified security policies are evaluated after global security policies.

CTraffic can initially match multiple unified security policies.

DAPPID results are used to determine the final security policy

Answer : C, D

unified security policies are security policies that enable you to use dynamic applications as match conditions along with existing 5-tuple or 6-tuple matching conditions12.They simplify application-based security policy management at Layer 7 and provide greater control and extensibility to manage dynamic applications traffic3

Question 4

Your manager asks you to provide firewall and NAT services in a private cloud.

Which two solutions will fulfill the minimum requirements for this deployment? (Choose two.)

Aa single vSRX

Ba vSRX for firewall services and a separate vSRX for NAT services

Ca cSRX for firewall services and a separate cSRX for NAT services

Da single cSRX

Answer : B, C

A single vSRX or cSRX cannot provide both firewall and NAT services simultaneously. To meet the minimum requirements for this deployment, you need to deploy a vSRX for firewall services and a separate vSRX for NAT services (option B), or a cSRX for firewall services and a separate cSRX for NAT services (option C). This is according to the Juniper Networks Certified Security Specialist (JNCIS-SEC) Study Guide.

Question 5

You have deployed an SRX300 Series device and determined that files have stopped being scanned.

In this scenario, what is a reason for this problem?

AThe software license is a free model and only scans executable type files.

BThe infected host communicated with a command-and-control server, but it did not download malware.

CThe file is too small to have a virus.

DYou have exceeded the maximum files submission for your SRX platform size.

Answer : D

You have exceeded the maximum files submission for your SRX platform size: This statement iscorrectbecause file scanning on SRX300 Series device has a limit on the number of files that can be submitted per minute based on the platform size3.For example, SRX320 has a limit of 10 files per minute3.

Question 6

When a security policy is deleted, which statement is correct about the default behavior of active sessions allowed by that policy?

AThe active sessions allowed by the policy will be dropped.

BThe active sessions allowed by the policy will be marked as a legacy flow and will continue to be forwarded.

CThe active sessions allowed by the policy will be reevaluated by the cached

DThe active sessions allowed by the policy will continue

Answer : A

When a security policy is deleted, the active sessions allowed by the policy will be dropped. The default behavior is that all active sessions allowed by the policy will be terminated and the traffic will no longer be forwarded. There is no way to mark the active sessions as a legacy flow or to reevaluate them by the cached rules.

According to Juniper Networks Security, Specialist (JNCIS-SEC) Study Guide, when a security policy is deleted, the active sessions allowed by that policy will be dropped. This behavior is the default behavior of the device. There is no way to mark the active sessions as a legacy flow or to re-evaluate them against cached rules. The device will terminate the active sessions and will no longer forward traffic for those sessions.

Question 7

Which two statements are true about the fab interface in a chassis cluster? (Choose two.)

AThe fab link does not support fragmentation.

BThe physical interface for the fab link must be specified in the configuration.

CThe fab link supports traditional interface features.

DThe Junos OS supports only one fab link.

Answer : B, C

The physical interface for the fab link must be specified in the configuration. Additionally, the fab link supports traditional interface features such as MAC learning, security policy enforcement, and dynamic routing protocols. The fab link does not support fragmentation and the Junos OS supports up to two fab links.

Juniper JN0-335 Security, Specialist Exam Practice Test