Juniper JNCIS-SEC JN0-334 Questions & Answers

• Question 1:

  Which three statements are correct about fabric interfaces on the SRX5800? (Choose three.)

  A. Fabric interfaces must be user-assigned interfaces.

  B. Fabric interfaces must have a user-assigned IP address.

  C. Fabric interfaces must be same interface type.

  D. Fabric interfaces must be on the same Layer 2 segment.

  E. Fabric interfaces must be system-assigned interfaces.

  Correct Answer: CDE

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-chassis-clusterdata-plane-interfaces.html

• Question 2:

  You want to support reth LAG interfaces on a chassis cluster.

  What must be enabled on the interconnecting switch to accomplish this task?

  A. RSTP

  B. 802.3ad

  C. LLDP

  D. swfab

  Correct Answer: B

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-chassis-clusterredundant-ethernet-lag-interfaces.html

• Question 3:

  What are three primary functions of JATP? (Choose three.)

  A. detection

  B. encryption

  C. optimization

  D. analytics

  E. mitigation

  Correct Answer: ADE

• Question 4:

  You must deploy AppSecure in your network to block risky applications.

  In this scenario, which two AppSecure features are required? (Choose two.)

  A. AppFW

  B. AppID

  C. APBR

  D. AppTrack

  Correct Answer: BD

• Question 5:

  Which two statements describe IPS? (Choose two.)

  A. IPS can be used to prevent future attacks from occurring.

  B. IPS dynamically sends policy changes to SRX Series devices.

  C. IPS inspects up to Layer 4 in the OSI model.

  D. IPS inspects up to Layer 7 in the OSI model.

  Correct Answer: AD

• Question 6:

  What is the correct step sequence used when Sky ATP analyzes a file?

  A. static analysis -> cache lookup -> antivirus scanning -> dynamic analysis

  B. cache lookup -> static analysis -> antivirus scanning -> dynamic analysis

  C. cache lookup -> antivirus scanning -> static analysis -> dynamic analysis

  D. dynamic analysis -> static analysis -> antivirus scanning -> cache lookup

  Correct Answer: C

  Reference: https://www.juniper.net/documentation/en_US/release-independent/sky-atp/informationproducts/pathway-pages/sky-atp-admin-guide.pdf page 9

• Question 7:

  Which two statements about JIMS high availability are true? (Choose two.)

  A. JIMS supports high availability through the installation of the primary and secondary JIMS servers.

  B. SRX clients are configured with the shared virtual IP (VIP) address of the JIMS server.

  C. SRX clients are configured with the unique IP addresses of the primary and secondary JIMS servers.

  D. SRX clients synchronize authentication tables with both the primary and secondary JIMS servers.

  Correct Answer: AC

• Question 8:

  Where is AppSecure executed in the flow process on an SRX Series device?

  A. screens

  B. security policy

  C. zones

  D. services

  Correct Answer: D

• Question 9:

  Data plane logging operates in which two modes? (Choose two.)

  A. syslog

  B. binary

  C. event

  D. stream

  Correct Answer: CD

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/system-logging-for-asecurity-device.html

• Question 10:

  Which statement about the control link in a chassis cluster is correct?

  A. A cluster can have redundant control links.

  B. Recovering from a control link failure requires a reboot.

  C. The control link heartbeats contain the configuration file of the nodes.

  D. The control messages sent over the link are encrypted by default.

  Correct Answer: A

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-chassis-clusterdual-control-links.html