Juniper JN0-335 Exam Questions Instant Access

Question 1

Which two statements are correct about Juniper ATP Cloud? (Choose two.)

AOnce the target threshold is met, Juniper ATP Cloud continues looking for threats from 0 to 5 minutes.

BOnce the target threshold is met, Juniper ATP Cloud continues looking for threats levels range from 0 to 10 minutes.

CThe threat levels range from 0-10.

DThe threat levels range from 0-100.

Answer : A, C

According to the Juniper Networks JNCIS-SEC Study Guide, Juniper ATP Cloud sets target thresholds for security events and then continuously scans the environment for any activity that exceeds this threshold. Once the threshold is met, Juniper ATP Cloud continues looking for threats for a period of 0 to 5 minutes. The threat levels range from 0 to 10, with 0 being the lowest and 10 being the highest.

Question 2

Exhibit

You just finished setting up your command-and-control (C&C) category with Juniper ATP Cloud. You notice that all of the feeds have zero objects in them.

Which statement is correct in this scenario?

AThe security intelligence policy must be configured; on a unified security policy

BUse the commit full command to start the download.

CNo action is required, the feeds take a few minutes to download.

DSet the maximum C&C entries within the Juniper ATP Cloud GUI.

Answer : C

According to the Juniper Networks JNCIS-SEC Study Guide, when you set up your command-and-control (C&C) category with Juniper ATP Cloud, all of the feeds will initially have zero objects in them. This is normal, as it can take a few minutes for the feeds to download. No action is required in this scenario and you will notice the feeds start to populate with objects once the download is complete.

Question 3

Regarding static attack object groups, which two statements are true? (Choose two.)

AMatching attack objects are automatically added to a custom group.

BGroup membership automatically changes when Juniper updates the IPS signature database.

CGroup membership does not automatically change when Juniper updates the IPS signature database.

DYou must manually add matching attack objects to a custom group.

Answer : B, C

static attack object groups are predefined groups of attack objects that are included in Juniper's IPS signature database.These groups do not change automatically when Juniper updates the database2.

Question 4

You are asked to implement IPS on your SRX Series device.

In this scenario, which two tasks must be completed before a configuration will work? (Choose two.)

ADownload the IPS signature database.

BEnroll the SRX Series device with Juniper ATP Cloud.

CInstall the IPS signature database.

DReboot the SRX Series device.

Answer : A, C

The two tasks that must be completed before a configuration for IPS on an SRX Series device will work are downloading the IPS signature database and installing the IPS signature database. The Security, Specialist (JNCIS-SEC) Study guide provides further information on how to download and install the IPS signature database. Enrolling the SRX Series device with Juniper ATP Cloud is not necessary to make a configuration work, and rebooting the SRX Series device is not required either.

Question 5

Exhibit

Referring to the SRX Series flow module diagram shown in the exhibit, where is application security processed?

AForwarding Lookup

BServices ALGs

CSecurity Policy

DScreens

Answer : B

Question 6

Which two statements are correct about the fab interface in a chassis cluster? (Choose two.)

AReal-time objects (RTOs) are exchanged on the fab interface to maintain session synchronization.

BIn an active/active configuration, inter-chassis transit traffic is sent over the fab interface.

CThe fab interface enables configuration synchronization.

DHeartbeat signals sent on the fab interface monitor the health of the control plane link.

Answer : A, B

The fab interface is a fabric link that connects the two nodes in a chassis cluster. A chassis cluster is a high-availability feature that groups two identical SRX Series devices into a cluster that acts as a single device. The fab interface has two functions:

Real-time objects (RTOs) are exchanged on the fab interface to maintain session synchronization: RTOs are data structures that store information about active sessions, such as source and destination IP addresses, ports, protocols, and security policies. RTOs are exchanged between the nodes on the fab interface to ensure that both nodes have the same session information and can take over the traffic in case of a failover.

In an active/active configuration, inter-chassis transit traffic is sent over the fab interface: In an active/active configuration, both nodes in a cluster can process traffic for different redundancy groups (RGs). RGs are collections of interfaces or services that fail over together from one node to another. If traffic needs to transit from one RG to another RG that is active on a different node, it is sent over the fab interface.

Question 7

Which two statements are true about Juniper ATP Cloud? (Choose two.)

AJuniper ATP Cloud only uses one antivirus software package to analyze files.

BJuniper ATP Cloud uses multiple antivirus software packages to analyze files.

CJuniper ATP Cloud uses antivirus software packages to protect against zero-day threats.

DJuniper ATP Cloud does not use antivirus software packages to protect against zero-day threats.

Answer : B, D

Two statements that are true about Juniper ATP Cloud are:

Juniper ATP Cloud uses multiple antivirus software packages to analyze files: Juniper ATP Cloud is a cloud-based service that provides advanced threat prevention and detection for your network. It integrates with SRX Series firewalls and MX Series routers to analyze files and network traffic for signs of malicious activity. Juniper ATP Cloud uses multiple antivirus software packages from different vendors to scan files for known malware signatures and provide a comprehensive verdict based on their results.

Juniper ATP Cloud does not use antivirus software packages to protect against zero-day threats: Juniper ATP Cloud protects against zero-day threats by using dynamic analysis, not antivirus software packages. Dynamic analysis is a method of executing files in a sandbox environment and observing their behavior and network interactions. Dynamic analysis can uncover unknown malware that may evade static analysis or signature-based detection methods.

Juniper Security, Specialist JN0-335 Exam Questions