JN0-335 practice questions 1–10

1. Question 1 · 97 in bank

   Select 2

   Regarding static attack object groups, which two statements are true? (Choose two.)

   • AMatching attack objects are automatically added to a custom group.
   • BGroup membership automatically changes when Juniper updates the IPS signature database.
   • CGroup membership does not automatically change when Juniper updates the IPS signature database.
   • DYou must manually add matching attack objects to a custom group.

   Show answer

   Answer: CD

   Next question

2. Question 2 · 97 in bank

   Select 2

   You are deploying a new SRX Series device and you need to log denied traffic. In this scenario, which two policy parameters are required to accomplish this task? (Choose two.)

   • Asession-init
   • Bsession-close
   • Cdeny
   • Dcount

   Show answer

   Answer: AC

   Next question

3. Question 3 · 97 in bank

   You are asked to reduce the load that the JIMS server places on your corporate domain controller. Which action should you take in this situation?

   • AConnect JIMS to the RADIUS server.
   • BConnect JIMS to the domain Exchange server.
   • CConnect JIMS to the domain SQL server.
   • DConnect JIMS to another SRX Series device.

   Show answer

   Answer: A

   Next question

4. Question 4 · 97 in bank

   Select 2

   Which two statements about unified security policies are correct? (Choose two.)

   • AUnified security policies require an advanced feature license.
   • BUnified security policies are evaluated after global security policies.
   • CTraffic can initially match multiple unified security policies.
   • DAPPID results are used to determine the final security policy match.

   Show answer

   Answer: CD

   Next question

5. Question 5 · 97 in bank

   Select 2

   Click the Exhibit button.

   

   Referring to the exhibit, which two statements describe the type of proxy used? (Choose two.)

   • Aforward proxy
   • Bclient protection proxy
   • Cserver protection proxy
   • Dreverse proxy

   Show answer

   Answer: AB

   Next question

6. Question 6 · 97 in bank

   You have deployed an SRX300 Series device and determined that files have stopped being scanned. In this scenario, what is a reason for this problem?

   • AThe software license is a free model and only scans executable type files.
   • BThe infected host communicated with a command-and-control server, but it did not download malware.
   • CThe file is too small to have a virus.
   • DYou have exceeded the maximum files submission for your SRX platform size.

   Show answer

   Answer: D

   Next question

7. Question 7 · 97 in bank

   Select 3

   Which three statements about SRX Series device chassis clusters are true? (Choose three.)

   • AChassis cluster control links must be configured using RFC 1918 IP addresses.
   • BChassis cluster member devices synchronize configuration using the control link.
   • CA control link failure causes the secondary cluster node to be disabled.
   • DRecovery from a control link failure requires that the secondary member device be rebooted.
   • EHeartbeat messages verify that the chassis cluster control link is working.

   Show answer

   Answer: BCE

   Next question

8. Question 8 · 97 in bank

   Select 2

   Which two statements are correct about security policy changes when using the policy rematch feature? (Choose two.)

   • AWhen a policy change includes changing the policy's action from permit to deny, all existing sessions are maintained.
   • BWhen a policy change includes changing the policy's source or destination address match condition, all existing sessions are dropped.
   • CWhen a policy change includes changing the policy's action from permit to deny, all existing sessions are dropped.
   • DWhen a policy change includes changing the policy's source or destination address match condition, all existing sessions are reevaluated.

   Show answer

   Answer: CD

   Next question

9. Question 9 · 97 in bank

   Select 2

   You are asked to block malicious applications regardless of the port number being used. In this scenario, which two application security features should be used? (Choose two.)

   • AAppFW
   • BAppQoE
   • CAPPID
   • DAppTrack

   Show answer

   Answer: AC

   Next question

10. Question 10 · 97 in bank

    A client has attempted communication with a known command-and-control server and it has reached the configured threat level threshold. Which feed will the client's IP address be automatically added in this situation?

    • Athe command-and-control cloud feed
    • Bthe allowlist and blocklist feed
    • Cthe custom cloud feed
    • Dthe infected host cloud feed

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-335 practice, question 1. 97 questions available.