JN0-335 practice questions 51–60

1. Question 51 · 97 in bank

   Select 2

   Which two sources are used by Juniper Identity Management Service (JIMS) for collecting username and device IP addresses? (Choose two.)

   • AMicrosoft Exchange Server event logs
   • BDNS
   • CActive Directory domain controller event logs
   • DOpenLDAP service ports

   Show answer

   Answer: AC

   Next question

2. Question 52 · 97 in bank

   You are experiencing excessive packet loss on one of your two WAN links, each link coming from a different provider. You want to automatically route traffic from the degraded link to the working link. Which AppSecure component would you use to accomplish this task?

   • AAppFW
   • BAppQoE
   • CAppQoS
   • DAPBR

   Show answer

   Answer: B

   Next question

3. Question 53 · 97 in bank

   Which solution enables you to create security policies that include user and group information?

   • AJIMS
   • BATP Appliance
   • CNetwork Director
   • DNETCONF

   Show answer

   Answer: A

   Next question

4. Question 54 · 97 in bank

   Select 2

   Which two devices would you use for DDoS protection with Policy Enforcer? (Choose two.)

   • AvQFX
   • BMX
   • CvMX
   • DQFX

   Show answer

   Answer: BC

   Next question

5. Question 55 · 97 in bank

   Select 2

   What are two benefits of using a vSRX in a software-defined network? (Choose two.)

   • Ascalability
   • Bno required software license
   • Cgranular security
   • Dinfinite number of interfaces

   Show answer

   Answer: AC

   Next question

6. Question 56 · 97 in bank

   Click the Exhibit button.

   

   Referring to the exhibit, which statement is true?

   • ASSL proxy functions will ignore the session.
   • BSSL proxy leverages post-match results.
   • CSSL proxy must wait for return traffic for the final match to occur.
   • DSSL proxy leverages pre-match results.

   Show answer

   Answer: D

   Next question

7. Question 57 · 97 in bank

   Select 2

   Which two statements about SRX Series device chassis clusters are true? (Choose two.)

   • ARedundancy group 0 is only active on the cluster backup node.
   • BEach chassis cluster member requires a unique cluster ID value.
   • CEach chassis cluster member device can host active redundancy groups.
   • DChassis cluster member devices must be the same model.

   Show answer

   Answer: CD

   Next question

8. Question 58 · 97 in bank

   Select 2

   Which two statements are correct about the cSRX? (Choose two.)

   • AThe cSRX supports firewall, NAT, IPS, and UTM services.
   • BThe cSRX only supports Layer 2 “bump-in-the-wire” deployments.
   • CThe cSRX supports BGP, OSPF, and IS-IS routing services.
   • DThe cSRX has three default zones: trust, untrust, and management.

   Show answer

   Answer: AC

   Next question

9. Question 59 · 97 in bank

   Select 2

   What are two types of system logs that Junos generates? (Choose two.)

   • ASQL log files
   • Bdata plane logs
   • Csystem core dump files
   • Dcontrol plane logs

   Show answer

   Answer: BD

   Next question

10. Question 60 · 97 in bank

    Select 2

    You want to set up JSA to collect network traffic flows from network devices on your network. Which two statements are correct when performing this task? (Choose two.)

    • ABGP FlowSpec is used to collect traffic flows from Junos OS devices.
    • BStatistical sampling increases processor utilization.
    • CStatistical sampling decreases event correlation accuracy.
    • DSuperflows reduce traffic licensing requirements.

    Show answer

    Answer: CD

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-335 practice, question 51. 97 questions available.