JN0-336 practice questions 21–29

1. Question 21 · 29 in bank

   

   A pair of branch SRX Series devices are booted up in cluster mode. Referring to the exhibit, which statement is correct?

   • Athe devices are not running the same version of Junos.
   • Bthe devices are not the same hardware.
   • Cfxp0 or fxp1 on either device has an existing configuration.
   • Dnode1 is running a "factory-default config".

   Show answer

   Answer: C

   Next question

2. Question 22 · 29 in bank

   Select 3

   Which three algorithms are used to encrypt IP packets? (Choose three.)

   • AData Encryption Standard (DES)
   • BSecure Hash Algorithm (SHA) - 1
   • CMessage Digest 5 (MD5)
   • DTriple Data Encryption Standard (3DES)
   • EAdvanced Encryption Standard (AES)

   Show answer

   Answer: ADE

   Next question

3. Question 23 · 29 in bank

   Select 2

   Which two statements are correct about redundant fabric interfaces in a chassis cluster? (Choose two.)

   • Afab0 and fab1 are located on both node0 and node1.
   • Bfab0 is located on node0, whereas fab1 is located on node1.
   • CThe media type must be the same for each redundant fabric interface.
   • DThe media type can be different for each redundant fabric interface.

   Show answer

   Answer: AC

   Next question

4. Question 24 · 29 in bank

   Select 2

   Which two statements are correct about fabric interfaces on an SRX Series Firewall? (Choose two.)

   • AIn an active/active configuration, inter-chassis traffic uses the fab link.
   • BIn an active/passive configuration, inter-chassis traffic uses the fab link.
   • CThe node ID is reflected in the fabric interface name.
   • DThe cluster ID is reflected in the fabric interface name.

   Show answer

   Answer: AB

   Next question

5. Question 25 · 29 in bank

   Which statement is correct about Active Directory as an identity source for identity-aware security policies?

   • AIt supports a maximum of two domains.
   • BIt supports logical systems.
   • CIt supports 20 Active Directory servers per domain.
   • DIt tracks non-Windows Active Directory users.

   Show answer

   Answer: C

   Next question

6. Question 26 · 29 in bank

   Select 2

   You are asked to use Junos Space Security Director to download the latest application signatures in the AppID database. In this scenario, which two statements are correct? (Choose two.)

   • AThe AppID database is stored in Junos Space Security Director.
   • BThe AppID database is stored on the managed SRX Series device.
   • CThe AppID database is maintained by a third-party host.
   • DThe AppID database is stored on a local storage server in the management network.

   Show answer

   Answer: BC

   Next question

7. Question 27 · 29 in bank

   Select 2

   Which two statements are correct about IDP policy templates? (Choose two.)

   • AThey are provided by Juniper Networks.
   • BThey are not customizable.
   • CThey are available on a “factory-default config.”
   • DThey must be installed.

   Show answer

   Answer: AC

   Next question

8. Question 28 · 29 in bank

   Select 2

   Which two steps are necessary to prepare the Active Directory domain for a JIMS installation? (Choose two.)

   • ACreate two limited access user accounts.
   • BCreate three limited access user accounts.
   • CAdd one full access user account to Active Directory groups.
   • DAdd limited access user accounts to Active Directory groups.

   Show answer

   Answer: AD

   Next question

9. Question 29 · 29 in bank

   Select 2

   What are two ways to help reduce false positives for an IDP rule? (Choose two.)

   • AChange the rule to a lower severity action.
   • BRemove the attack object from the rule.
   • CCreate an exempt rule.
   • DConfigure a terminal rule at the end of the rule base.

   Show answer

   Answer: AC

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-336 practice, question 21. 29 questions available.