JN0-335 practice questions 71–80

1. Question 71 · 97 in bank

   Click the Exhibit button.

   

   Referring to the exhibit, what will the SRX Series device do in this configuration?

   • APackets from the infected hosts with a threat level of 8 will be dropped and a log message will be generated.
   • BPackets from the infected hosts with a threat level of 8 or above will be dropped and a log message will be generated.
   • CPackets from the infected hosts with a threat level of 8 or above will be dropped and no log message will be generated.
   • DPackets from the infected hosts with a threat level of 8 will be dropped and no log message will be generated.

   Show answer

   Answer: C

   Next question

2. Question 72 · 97 in bank

   Select 2

   You want to control when cluster failovers occur. In this scenario, which two specific parameters would you configure on an SRX Series device? (Choose two.)

   • Aheartbeat-interval
   • Bheartbeat-address
   • Cheartbeat-tos
   • Dheartbeat-threshold

   Show answer

   Answer: AD

   Next question

3. Question 73 · 97 in bank

   You administer a JSA host and want to include a rule that sets a threshold for excessive firewall denies and sends an SNMP trap after receiving related syslog messages from an SRX Series firewall. Which JSA rule type satisfies this requirement?

   • Acommon
   • Boffense
   • Cflow
   • Devent

   Show answer

   Answer: D

   Next question

4. Question 74 · 97 in bank

   Select 2

   Which two statements about the DNS ALG are correct? (Choose two.)

   • AThe DNS ALG supports DDNS.
   • BThe DNS ALG supports VPN tunnels.
   • CThe DNS ALG performs DNS doctoring.
   • DThe DNS ALG does not support NAT.

   Show answer

   Answer: AC

   Next question

5. Question 75 · 97 in bank

   You are troubleshooting unexpected issues on your JIMS server due to out of order event log timestamps. Which action should you take to solve this issue?

   • AEnable time synchronization on the client devices.
   • BEnable time synchronization on the JIMS server.
   • CEnable time synchronization on the domain controllers.
   • DEnable time synchronization on the SRX Series devices.

   Show answer

   Answer: C

   Next question

6. Question 76 · 97 in bank

   Which statement defines the function of an Application Layer Gateway (ALG)?

   • AThe ALG uses software processes for permitting or disallowing specific IP address ranges.
   • BThe ALG uses software that is used by a single TCP session using the same port numbers as the application.
   • CThe ALG contains protocols that use one application session for each TCP session.
   • DThe ALG uses software processes for managing specific protocols.

   Show answer

   Answer: D

   Next question

7. Question 77 · 97 in bank

   Select 2

   Which two statements about SRX Series device chassis clusters are correct? (Choose two.)

   • AThe chassis cluster data plane is connected with revenue ports.
   • BThe chassis cluster can contain a maximum of three devices.
   • CThe chassis cluster data plane is connected with SPC ports.
   • DThe chassis cluster can contain a maximum of two devices.

   Show answer

   Answer: AD

   Next question

8. Question 78 · 97 in bank

   Select 2

   Which two statements are correct about the Junos IPS feature? (Choose two.)

   • AIPS is integrated as a security service on SRX Series devices.
   • BIPS uses sandboxing to detect unknown attacks.
   • CIPS is a standalone platform running on dedicated hardware or as a virtual device.
   • DIPS uses protocol anomaly rules to detect unknown attacks.

   Show answer

   Answer: AD

   Next question

9. Question 79 · 97 in bank

   Click the Exhibit button.

   

   You are asked to create a security policy that will automatically add infected hosts to the infected hosts feed and block further communication through the SRX Series device. What needs to be added to this configuration to complete this task?

   • AAdd a security intelligence policy to the permit portion of the security policy.
   • BAdd an action to the permit portion of the security policy.
   • CAdd logging to the permit portion of the security policy.
   • DAdd a match rule to the security policy with an appropriate threat level.

   Show answer

   Answer: A

   Next question

10. Question 80 · 97 in bank

    You are preparing a proposal for a new customer who has submitted the following requirements for a vSRX deployment: -- globally distributed, -- rapid provisioning, -- scale based on demand, -- and low CapEx. Which solution satisfies these requirements?

    • AAWS
    • BNetwork Director
    • CJuniper ATP Cloud
    • DVMWare ESXi

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-335 practice, question 71. 97 questions available.