Juniper JNCIS-SEC JN0-334 Questions & Answers

• Question 21:

  Click the Exhibit button.

  

  Which two statements are true about the session shown in the exhibit? (Choose two.)

  A. Two security policies are required for bidirectional traffic flow.

  B. The ALG was enabled by manual configuration.

  C. The ALG was enabled by default.

  D. One security policy is required for bidirectional traffic flow.

  Correct Answer: AB

• Question 22:

  After performing a software upgrade on an SRX5800 chassis cluster, you notice that node1 is in the primary state and node0 is in the backup state. Your network standards dictate that node0 should be in the primary state.

  In this scenario, which command should be used to comply with the network standards?

  A. request chassis cluster failover redundancy-group 254 node 1

  B. request chassis cluster failover redundancy-group 0 node 0

  C. request chassis cluster failover redundancy-group 254 mode 0

  D. request chassis cluster failover redundancy-group 0 node 1

  Correct Answer: B

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-chassis-clusterredundancy-group-failover.html

• Question 23:

  Click the Exhibit button.

  

  You have configured the scheduler shown in the exhibit to prevent users from accessing certain websites from 1:00 PM to 3:00 PM Monday through Friday. This policy will remain in place until further notice. When testing the policy, you determine that the websites are still accessible during the restricted times.

  In this scenario, which two actions should you perform to solve the problem? (Choose two.)

  A. Add the saturday excludeparameter and the sunday excludeparameter to ensure weekends are excluded from the schedule.

  B. Use the 13:00 parameter and the 15:00 parameter when specifying the time.

  C. Use the start-dateparameter to specify the date for each Monday and use the stop-dateparameter to specify the date for each Friday.

  D. Use the PM parameter when specifying the time in the schedule.

  Correct Answer: AB

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/ schedulers-edit-scheduler.html

• Question 24:

  Click the Exhibit button.

  

  You examine the log file shown in the exhibit after running the set security idp active-policycommand.

  Which two statements are true in this scenario? (Choose two.)

  A. The IDP policy compiled successfully.

  B. The IDP policy loaded successfully.

  C. The IDP hit cache is set to 16384.

  D. The entire configuration was committed.

  Correct Answer: AB

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-idp-policiesoverview.html

• Question 25:

  Which two session parameters would be used to manage space on the session table? (Choose two.)

  A. low watermark

  B. high watermark

  C. TCP MSS

  D. TCP RST

  Correct Answer: AB

  Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-flow-basedsession-for-srx-series-devices.html

• Question 26:

  Click the Exhibit button.

  

  Referring to the exhibit, which two devices are considered to be part of the secure fabric site with Policy Enforcer? (Choose two.)

  A. Server-2

  B. SRX-1

  C. Server-1

  D. QFX-1

  Correct Answer: BD

• Question 27:

  You are asked to convert two standalone SRX Series devices to a chassis cluster deployment. You must ensure that your IPsec tunnels will be compatible with the new deployment.

  In this scenario, which two interfaces should be used when binding your tunnel endpoints? (Choose two.)

  A. pp0

  B. reth

  C. lo0

  D. ge

  Correct Answer: BD

• Question 28:

  Which two protocols are supported for Sky ATP advanced anti-malware scanning? (Choose two.)

  A. POP3

  B. MAPI

  C. IMAP

  D. SMTP

  Correct Answer: CD

• Question 29:

  You are deploying the Junos application firewall feature in your network.

  In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)

  A. destination port

  B. source port

  C. destination IP address

  D. source IP address

  Correct Answer: AC

• Question 30:

  What are two management methods for cSRX? (Choose two.)

  A. Network Director

  B. J-Web

  C. CLI

  D. Contrail

  Correct Answer: BC