JN0-335 practice questions 81–90

1. Question 81 · 97 in bank

   Select 3

   On which three Hypervisors is vSRX supported? (Choose three.)

   • AVMware ESXi
   • BCitrix Hypervisor
   • CHyper-V
   • DKVM
   • EOracle VM

   Show answer

   Answer: ACD

   Next question

2. Question 82 · 97 in bank

   Select 2

   Which two statements are correct about a policy scheduler? (Choose two.)

   • AA policy scheduler can only be applied when using the policy-rematch feature.
   • BA policy scheduler can be dynamically activated based on traffic flow volumes.
   • CA policy scheduler can be defined using a daily schedule.
   • DA policy scheduler determines the time frame that a security policy is actively evaluated.

   Show answer

   Answer: CD

   Next question

3. Question 83 · 97 in bank

   You want to be alerted if the wrong password is used more than three times on a single device within five minutes. Which Juniper Networks solution will accomplish this task?

   • AAdaptive Threat Profiling
   • BJuniper Secure Analytics
   • CJuniper Identity Management Service
   • DIntrusion Prevention System

   Show answer

   Answer: B

   Next question

4. Question 84 · 97 in bank

   While working on an SRX firewall, you execute the show security policies policy-name <name> detail command. Which function does this command accomplish?

   • AIt displays details about the default security policy.
   • BIt identifies the different custom policies enabled.
   • CIt shows the system log files for the local SRX Series device.
   • DIt shows policy counters for a configured policy.

   Show answer

   Answer: D

   Next question

5. Question 85 · 97 in bank

   Select 2

   Your JIMS server is unable to view event logs. Which two actions would you take to solve this issue? (Choose two.)

   • AEnable the correct host-inbound-traffic rules on the SRX Series devices.
   • BEnable remote event log management within Windows Firewall on the necessary Exchange servers.
   • CEnable remote event log management within Windows Firewall on the necessary domain controllers.
   • DEnable remote event log management within Windows Firewall on the JIMS server.

   Show answer

   Answer: BC

   Next question

6. Question 86 · 97 in bank

   Select 2

   Which two statements are correct about the fab interface in a chassis cluster? (Choose two.)

   • AReal-time objects (RTOs) are exchanged on the fab interface to maintain session synchronization.
   • BIn an active/active configuration, inter-chassis transit traffic is sent over the fab interface.
   • CThe fab interface enables configuration synchronization.
   • DHeartbeat signals sent on the fab interface monitor the health of the control plane link.

   Show answer

   Answer: AB

   Next question

7. Question 87 · 97 in bank

   Select 2

   Which two statements are correct about a reth LAG? (Choose two.)

   • ALinks must have the same speed and duplex setting.
   • BLinks must use the same cable type.
   • CYou must have a *minimum-links* statement value of two.
   • DYou should have two or more interfaces.

   Show answer

   Answer: AD

   Next question

8. Question 88 · 97 in bank

   Select 2

   Regarding dynamic attack object groups, which two statements are true? (Choose two.)

   • AGroup membership automatically changes when Juniper updates the IPS signature database.
   • BYou must manually add matching attack objects to a custom group.
   • CMatching attack objects are automatically added to a custom group.
   • DGroup membership does not automatically change when Juniper updates the IPS signature database.

   Show answer

   Answer: AC

   Next question

9. Question 89 · 97 in bank

   Select 2

   Which two statements are true about application identification? (Choose two.)

   • AApplication identification can identify nested applications that are within Layer 7.
   • BApplication identification cannot identify nested applications that are within Layer 7.
   • CApplication signatures are the same as IDP signatures.
   • DApplication signatures are not the same as IDP signatures.

   Show answer

   Answer: AD

   Next question

10. Question 90 · 97 in bank

    Which sequence does an SRX Series device use when implementing stateful session security policies using Layer 3 routes?

    • AAn SRX Series device will perform a security policy search before conducting a longest-match Layer 3 route table lookup.
    • BAn SRX Series device performs a security policy search before implementing an ALG security check on the longest-match Layer 3 route.
    • CAn SRX Series device will conduct a longest-match Layer 3 route table lookup before performing a security policy search.
    • DAn SRX Series device conducts an ALG security check on the longest-match route before performing a security policy search.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-335 practice, question 81. 97 questions available.