Juniper Juniper Certifications JN0-355 Questions & Answers

• Question 61:

  You are implementing several Host Checker policies on your users, however, you must block access to a specific Web server when users fail one specific Host Checker policy. Which Host Checker implementation allows you to satisfy this requirement?

  A. Implement your Host Checker policy as an initial policy (pre sign-in).

  B. Implement your Host Checker policy at the authentication realm to evaluate only.

  C. Implement Host Checker policies at the user role where the users with different Web access requirements belong to different roles with different Host Checker policies defined.

  D. Implement a Web access resource policy that contains a detailed rule with conditions on specific Host Checker policies as conditions for access.

  Correct Answer: D

• Question 62:

  A Web site is available to all users but it does not display correctly when using basic Web access.

  You want to provide an alternate method for accessing the Web site through the Junos Pulse Secure Access Service while continuing to provide all other Web content using basic Web access.

  In the Admin UI, which two actions must be performed for users to access the Web site? (Choose two.)

  A. Create a Web Proxy policy.

  B. Create a Do Not Rewrite Selective Rewrite policy.

  C. Configure Junos Pulse to provision Layer 3 access.

  D. Configure a proxy connection on your browser.

  Correct Answer: BC

• Question 63:

  You must plan the deployment of Junos Pulse to hundreds of end users on various client platforms including Windows laptops, smartphones running Google Android, and iPad users. What are three delivery methods that you would use to complete this task? (Choose three.)

  A. Users can connect to the Secure Access Gateway Web portal and install Junos Pulse from the start page.

  B. You can distribute a default installer to endpoints, install it, and let users create their own connections.

  C. You can configure a Host Checker policy to detect if Junos Pulse is installed and deliver the installation to the endpoint during pre-authentication.

  D. Smartphone users can download the Junos Pulse installer from the mobile application section of the Web portal start page.

  E. You can create an .msi installer that contains connection settings and services along with the Junos Pulse installer and deliver this to endpoints using a software distribution process.

  Correct Answer: ABE

• Question 64:

  What are two valid Junos Pulse Secure Access Service clustering implementations? (Choose two.)

  A. passive/passive

  B. active/passive

  C. online/offline

  D. active/active

  Correct Answer: BD

• Question 65:

  Which statement is correct about VPN tunneling clients?

  A. Network Connect supports the use of client certificates on Windows and Linux systems only.

  B. The Junos Pulse client supports the use of client certificates on Windows systems only.

  C. Network Connect supports the use of client certificates on smart phones and PDAs.

  D. Junos Pulse supports the use of client certificates on iOS and Android OS devices.

  Correct Answer: D

• Question 66:

  Which three elements are required to deploy the Service Provider Edition (SPE) virtual appliance? (Choose three.)

  A. a MAG Series device acting as license server

  B. user subscription licensing

  C. a server that hosts the virtual appliances

  D. LDAP authentication

  E. Device Management Interface (DMI)

  Correct Answer: ABC

• Question 67:

  You must perform daily backup operations of logging information as well as configuration. What should you choose in the Admin UI to achieve this?

  A. Syslog

  B. Local Backups

  C. SNMP

  D. Archiving Servers

  Correct Answer: D

• Question 68:

  A user is currently not able to sign in to the Junos Pulse Secure Access Service. LDAP authentication is currently configured for all users. You run a TCP dump during the authentication attempt and notice that the response from the LDAP server lists resultCodE. invalidCredentials (49).

  Which type of issue is the user experiencing?

  A. authentication

  B. authorization

  C. resource policy

  D. role restriction

  Correct Answer: A

• Question 69:

  In the Admin UI, you want to configure Web caching settings within a Web Access resource policy. Which statement is correct?

  A. The file types (e.g., GIF, JPG, PNG, MOV, MP3) that you want cached are configurable.

  B. The threshold in kilobytes of image files that should be cached by a client is configurable.

  C. The upper time limit for holding a page in cache is a configuration option.

  D. The cacheable content of a URL is configurable.

  Correct Answer: B

• Question 70:

  You want to sign in to the Admin UI from the external interface but cannot bring up the Web page.

  The only configuration that has been accomplished are the network settings.

  What must be configured for you to bring up the Admin UI?

  A. The IP address of your workstation must be added to the allow list.

  B. A new URL must be created for the Web page to be accessed on the external interface.

  C. The external interface must be enabled for admin access.

  D. You must create a new authentication server for this admin login page.

  Correct Answer: C