JN0-335 practice questions 21–30

1. Question 21 · 97 in bank

   Select 2

   Your manager asks you to provide firewall and NAT services in a private cloud. Which two solutions will fulfill the minimum requirements for this deployment? (Choose two.)

   • Aa single vSRX
   • Ba vSRX for firewall services and a separate vSRX for NAT services
   • Ca cSRX for firewall services and a separate cSRX for NAT services
   • Da single cSRX

   Show answer

   Answer: AD

   Next question

2. Question 22 · 97 in bank

   Select 2

   Which two statements are true about mixing traditional and unified security policies? (Choose two.)

   • AWhen a packet matches a unified security policy, the evaluation process terminates.
   • BTraditional security policies must come before unified security policies.
   • CUnified security policies must come before traditional security policies.
   • DWhen a packet matches a traditional security policy, the evaluation process terminates.

   Show answer

   Answer: BD

   Next question

3. Question 23 · 97 in bank

   Click the Exhibit button.

   

   Referring to the exhibit, what do you determine about the status of the cluster?

   • ABoth nodes determine that they are in a primary state.
   • BNode 1 is down.
   • CNode 2 is down.
   • DThere are no issues with the cluster.

   Show answer

   Answer: A

   Next question

4. Question 24 · 97 in bank

   Select 2

   Which two features are configurable on Juniper Secure Analytics (JSA) to ensure that alerts are triggered when matching certain criteria? (Choose two.)

   • Abuilding blocks
   • Bassets
   • Cevents
   • Dtests

   Show answer

   Answer: AC

   Next question

5. Question 25 · 97 in bank

   Select 2

   You are asked to implement IPS on your SRX Series device. In this scenario, which two tasks must be completed before a configuration will work? (Choose two.)

   • ADownload the IPS signature database.
   • BEnroll the SRX Series device with Juniper ATP Cloud.
   • CInstall the IPS signature database.
   • DReboot the SRX Series device.

   Show answer

   Answer: AC

   Next question

6. Question 26 · 97 in bank

   Select 2

   Which two statements are correct about Juniper ATP Cloud? (Choose two.)

   • AOnce the target threshold is met, Juniper ATP Cloud continues looking for threats from 0 to 5 minutes.
   • BOnce the target threshold is met, Juniper ATP Cloud continues looking for threats from 0 to 10 minutes.
   • CThe threat levels range from 0-10.
   • DThe threat levels range from 0-100.

   Show answer

   Answer: AC

   Next question

7. Question 27 · 97 in bank

   Click the Exhibit button.

   

   You just finished setting up your command-and-control (C&C) category with Juniper ATP Cloud. You notice that all of the feeds have zero objects in them. Which statement is correct in this scenario?

   • AThe security intelligence policy must be configured on a unified security policy.
   • BUse the commit full command to start the download.
   • CNo action is required, the feeds take a few minutes to download.
   • DSet the maximum C&C entries within the Juniper ATP Cloud GUI.

   Show answer

   Answer: C

   Next question

8. Question 28 · 97 in bank

   Select 2

   Your network uses a single JSA host and you want to implement a cluster. In this scenario, which two statements are correct? (Choose two.)

   • AThe software versions on both primary and secondary hosts must match.
   • BThe secondary host can backup multiple JSA primary hosts.
   • CThe primary and secondary hosts must be configured with the same external storage devices.
   • DThe cluster virtual IP will need an unused IP address assigned.

   Show answer

   Answer: AD

   Next question

9. Question 29 · 97 in bank

   You enable chassis clustering on two devices and assign a cluster ID and a node ID to each device. In this scenario, what is the correct order for rebooting the devices?

   • AReboot the secondary device, then the primary device.
   • BReboot only the secondary device since the primary will assign itself the correct cluster and node ID.
   • CReboot the primary device, then the secondary device.
   • DReboot only the primary device since the secondary will assign itself the correct cluster and node ID.

   Show answer

   Answer: C

   Next question

10. Question 30 · 97 in bank

    Select 2

    Which two statements about SRX chassis clustering are correct? (Choose two.)

    • ASRX chassis clustering supports active/passive and active/active for the data plane.
    • BSRX chassis clustering only supports active/passive for the data plane.
    • CSRX chassis clustering supports active/passive for the control plane.
    • DSRX chassis clustering supports active/active for the control plane.

    Show answer

    Answer: AC

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-335 practice, question 21. 97 questions available.