Juniper Juniper Certifications JN0-355 Questions & Answers

• Question 31:

  Which two types of traffic does the Host Checker connection control policy block on the client? (Choose two.)

  A. all incoming TCP traffic

  B. all outgoing TCP traffic

  C. all outgoing DNS traffic

  D. all incoming UDP traffic

  Correct Answer: AD

• Question 32:

  Certain users within your organization have an LDAP attribute named userAttr.EmployeeLevel.

  You want to map these users to a specific role if the value of the attribute is 65 or higher.

  In the Admin UI, which role mapping rule type will perform this operation?

  A. Username

  B. Group Membership

  C. Custom Expression

  D. Certificate Attribute

  Correct Answer: C

• Question 33:

  You want to create a policy that grants access only to the server 1.1.1.1 directory called Sales and access inside that directory only to .doc files. Which two policies will satisfy the requirement? (Choose two.)

  A. \\1.1.1.1\sales\*.doc

  B. \\1.1.1.1\sales\%.doc

  C. \\1.1.1.1\%sales%\*.doc

  D. \\1.1.1.1\*\%.doc

  Correct Answer: AB

• Question 34:

  You are asked to set up Junos Pulse Secure Access Service in a high availability, active/active cluster configuration. In the Admin UI, which two cluster settings are available? (Choose two.)

  A. Internal VIP

  B. Member Name

  C. Synchronize user-defined bookmarks

  D. Synchronize log messages

  Correct Answer: BD

• Question 35:

  A Junos Pulse Secure Access Service has a device certificate issued for sa.pulse.local. Users accessing sales.pulse.local and finance.pulse.local receive a certificate warning any time they access the Junos Pulse Secure Access Service. As an administrator, which two actions would resolve the issue? (Choose two.)

  A. Install a wildcard certificate for *.pulse.local.

  B. Remove the sa.pulse.local device certificate.

  C. Install certificates for sales.pulse.local and finance.pulse.local on the same interface.

  D. Load multiple server certificates (one for each hostname), and create a virtual port to associate the specific URL.

  Correct Answer: AD

• Question 36:

  Which two features does the Junos Pulse Secure Access Service offer that enhance security on the corporate network? (Choose two.)

  A. enforcement of endpoint compliance

  B. secure OSPF routing

  C. firewall filtering

  D. support for multiple client types

  Correct Answer: BC

• Question 37:

  What are two operational functions of the VPN Tunneling client? (Choose two.)

  A. It provides the ability to select applications that use a tunneling service.

  B. It supports dual transport modes, ESP or SSL

  C. It supports Windows domain single sign-on.

  D. It requires Web browser-based user authentication.

  Correct Answer: BC

• Question 38:

  You want to use canonical formats to specify the following resource for a resource policy:

  1.1.1.1:80/employee/%

  Which directory path matches this resource?

  A. 1.1.1.1:80/employee/payroll/data.html

  B. www.hostname.com:80/employee/payroll/data.html

  C. 1.1.1.1:80/employee/data.html

  D. www.hostname.com:80/data.html

  Correct Answer: C

• Question 39:

  How are user role-mapping rules processed by the Junos Pulse Secure Access Service gateway?

  A. All rules are processed in a top-down fashion for the best match. If no match is found, the user is not allowed to sign in to the realm.

  B. All rules are processed in a top-down fashion for the best match. If no match is found, the user is assigned to the default role.

  C. All rules are processed in a top-down fashion for all eligible matches. If no match is found, the user is not allowed to sign into the realm.

  D. All rules are processed in a top-down fashion for all eligible matches. If no match is found, the user is assigned to the default role.

  Correct Answer: C

• Question 40:

  You are the presenter of a Junos Pulse Collaboration meeting and attendees indicate that the presentation seems to have a problem with color quality. How would you resolve this issue?

  A. Stop sharing the application and try to reshare again.

  B. Enable True Color Presentations in the meeting.

  C. Reboot the MAG Series device.

  D. Enable True Color Presentations globally.

  Correct Answer: D