JN0-335 practice questions 61–70

1. Question 61 · 97 in bank

   What information does encrypted traffic insights (ETI) use to notify SRX Series devices about known malware sites?

   • Acertificates
   • Bdynamic address groups
   • CMAC addresses
   • Ddomain names

   Show answer

   Answer: A

   Next question

2. Question 62 · 97 in bank

   Select 2

   Click the Exhibit button.

   

   You are asked to track BitTorrent traffic on your network. You need to automatically add the workstations to the High_Risk_Workstations feed and the servers to the BitTorrent_Servers feed automatically to help mitigate future threats. Which two commands would add this functionality to the FindThreat policy? (Choose two.)

   • A//IMG//
   • B//IMG//
   • C//IMG//
   • D//IMG//

   Show answer

   Answer: AD

   Next question

3. Question 63 · 97 in bank

   Select 2

   Which two types of SSL proxy are available on SRX Series devices? (Choose two.)

   • AWeb proxy
   • Bclient-protection
   • Cserver-protection
   • DDNS proxy

   Show answer

   Answer: BC

   Next question

4. Question 64 · 97 in bank

   Click the Exhibit button.

   

   You are asked to ensure that servers running the Ubuntu OS will not be able to update automatically by blocking their access at the SRX firewall. You have configured a unified security policy named BlockUbuntu, but it is not blocking the updates to the OS. Referring to the exhibit, which statement will block the Ubuntu OS updates?

   • AMove the BlockUbuntu policy after the AllowWeb policy.
   • BConfigure the BlockUbuntu policy with the junos-https application parameter.
   • CChange the default policy to permit-all.
   • DConfigure the AllowWeb policy to have a dynamic application of any.

   Show answer

   Answer: A

   Next question

5. Question 65 · 97 in bank

   Select 2

   Which two statements are correct about AppTrack? (Choose two.)

   • AAppTrack can be configured for any defined logical system on an SRX Series device.
   • BAppTrack identifies and blocks traffic flows that might be malicious regardless of the ports being used.
   • CAppTrack collects traffic flow information including byte, packet, and duration statistics.
   • DAppTrack can only be configured in the main logical system on an SRX Series device.

   Show answer

   Answer: AC

   Next question

6. Question 66 · 97 in bank

   Click the Exhibit button.

   

   You have implemented SSL client protection proxy. Employees are receiving the error shown in the exhibit. How do you solve this problem?

   • ALoad a known good, but expired, CA certificate onto the SRX Series device.
   • BInstall a new SRX Series device to act as the client proxy.
   • CReboot the SRX Series device.
   • DImport the existing certificate to each client device.

   Show answer

   Answer: D

   Next question

7. Question 67 · 97 in bank

   Select 2

   On an SRX Series firewall, what are two ways that Encrypted Traffic Insights assess the threat of the traffic? (Choose two.)

   • AIt decrypts the file in a sandbox.
   • BIt validates the certificates used.
   • CIt decrypts the data to validate the hash.
   • DIt reviews the timing and frequency of the connections.

   Show answer

   Answer: BD

   Next question

8. Question 68 · 97 in bank

   Select 2

   Click the Exhibit button.

   

   Which two statements describe the output shown in the exhibit? (Choose two.)

   • ARedundancy group 1 experienced an operational failure.
   • BRedundancy group 1 was administratively failed over.
   • CNode 0 is controlling traffic for redundancy group 1.
   • DNode 1 is controlling traffic for redundancy group 1.

   Show answer

   Answer: BD

   Next question

9. Question 69 · 97 in bank

   Select 2

   What are two requirements for enabling AppQoE? (Choose two.)

   • AYou need two SRX Series device endpoints.
   • BYou need two SRX Series or MX Series device endpoints.
   • CYou need an APPID feature license.
   • DYou need to configure AppQoE for reverse traffic.

   Show answer

   Answer: BC

   Next question

10. Question 70 · 97 in bank

    How does Juniper ATP Cloud protect a network from zero-day threats?

    • AIt uses a cache lookup.
    • BIt uses antivirus software.
    • CIt uses dynamic analysis.
    • DIt uses known virus signatures.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-335 practice, question 61. 97 questions available.