JN0-335 practice questions 11–20

1. Question 11 · 97 in bank

   When a security policy is deleted, which statement is correct about the default behavior for active sessions allowed by that policy?

   • AThe active sessions allowed by the policy will be dropped.
   • BThe active sessions allowed by the policy will be marked as a legacy flow and will continue to be forwarded.
   • CThe active sessions allowed by the policy will be reevaluated by the cached policy rules.
   • DThe active sessions allowed by the policy will continue unchanged.

   Show answer

   Answer: A

   Next question

2. Question 12 · 97 in bank

   You are asked to determine how much traffic a popular gaming application is generating on your network. Which action will you perform to accomplish this task?

   • AEnable AppQoS on the proper security zones.
   • BEnable APBR on the proper security zones.
   • CEnable screen options on the proper security zones.
   • DEnable AppTrack on the proper security zones.

   Show answer

   Answer: D

   Next question

3. Question 13 · 97 in bank

   How does the SSL proxy detect if encryption is being used?

   • AIt uses application identity services.
   • BIt verifies the length of the packet.
   • CIt queries the client device.
   • DIt looks at the destination port number.

   Show answer

   Answer: A

   Next question

4. Question 14 · 97 in bank

   Select 2

   Which two statements are correct when considering IPS rule base evaluation? (Choose two.)

   • AIPS evaluates rules concurrently.
   • BIPS applies the most severe action to traffic matching multiple rules.
   • CIPS evaluates rules sequentially.
   • DIPS applies the least severe action to traffic matching multiple rules.

   Show answer

   Answer: BC

   Next question

5. Question 15 · 97 in bank

   Select 2

   You have implemented a vSRX in your VMware environment. You want to implement a second vSRX Series device and enable chassis clustering. Which two statements are correct in this scenario about the control-link settings. (Choose two.)

   • AIn the vSwitch security settings, accept promiscuous mode.
   • BIn the vSwitch properties settings, set the VLAN ID to None.
   • CIn the vSwitch security settings, reject forged transmits.
   • DIn the vSwitch security settings, reject MAC address changes.

   Show answer

   Answer: AB

   Next question

6. Question 16 · 97 in bank

   Select 2

   Which two statements are true about the vSRX? (Choose two.)

   • AIt does not have VMXNET3 vNIC support.
   • BIt has VMXNET3 vNIC support.
   • CUNIX is the base OS.
   • DLinux is the base OS.

   Show answer

   Answer: BD

   Next question

7. Question 17 · 97 in bank

   Click the Exhibit button.

   

   Using the information from the exhibit, which statement is correct?

   • ARedundancy group 1 is in an ineligible state.
   • BNode1 is the active node for the control plane.
   • CThere are no issues with the cluster.
   • DRedundancy group 0 is in an ineligible state.

   Show answer

   Answer: A

   Next question

8. Question 18 · 97 in bank

   You want to manually failover the primary Routing Engine in an SRX Series high availability cluster pair. Which step is necessary to accomplish this task?

   • AIssue the set chassis cluster disable reboot command on the primary node.
   • BImplement the control link recovery solution before adjusting the priorities.
   • CManually request the failover and identify the secondary node.
   • DAdjust the priority in the configuration on the secondary node.

   Show answer

   Answer: C

   Next question

9. Question 19 · 97 in bank

   Select 2

   You want to permit access to an application but block application sub-features that enable users to upload content. Which two security policy features provide this capability? (Choose two.)

   • AURL filtering
   • Bmicro application detection
   • Ccontent filtering
   • DAPPID

   Show answer

   Answer: BD

   Next question

10. Question 20 · 97 in bank

    Which statement regarding Juniper Identity Management Service (JIMS) domain PC probes is true?

    • AJIMS domain PC probes analyze domain controller security event logs at 60-minute intervals by default.
    • BJIMS domain PC probes are triggered if no username to IP address mapping is found in the domain security event log.
    • CJIMS domain PC probes are triggered to map usernames to group membership information.
    • DJIMS domain PC probes are initiated by an SRX Series device to verify authentication table information.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-335 practice, question 11. 97 questions available.