Juniper JNCIS-SEC JN0-334 Questions & Answers

• Question 71:

  You must ensure that all encrypted traffic passing through your SRX device uses strong protocols and ciphers.

  Which feature should you implement to satisfy this requirement?

  A. SSL proxy

  B. AppSecure

  C. JIMS

  D. JATP

  Correct Answer: A

• Question 72:

  Click the Exhibit button.

  

  You are configuring an SRX chassis cluster with the node-specific hostname and management address. Referring to the exhibit, which configuration completes this requirement?

  

  A. B. C. D.

  Correct Answer: C

• Question 73:

  Which statement is true about JATP incidents?

  A. Incidents have an associated threat number assigned to them.

  B. Incidents are sorted by category, followed by severity.

  C. Incidents consist of all the events associated with a single threat.

  D. Incidents are always automatically mitigated.

  Correct Answer: C

• Question 74:

  Click the Exhibit button.

  

  Which two statements describe the output shown in the exhibit? (Choose two.)

  A. Node 0 is passing traffic for redundancy group 1.

  B. Redundancy group 1 experienced an operational failure.

  C. Redundancy group 1 was administratively failed over.

  D. Node 1 is passing traffic for redundancy group1.

  Correct Answer: CD

• Question 75:

  Which statement describes the AppTrack module in AppSecure?

  A. The AppTrack module provides enforcement with the ability to block traffic, based on specific applications.

  B. The AppTrack module provides control by the routing of traffic, based on the application.

  C. The AppTrack module identifies the applications that are present in network traffic.

  D. The AppTrack module provides visibility and volumetric reporting of application usage on the network.

  Correct Answer: C

• Question 76:

  What information does JIMS collect from domain event log sources? (Choose two.)

  A. For user login events, JIMS collects the username and group membership information.

  B. For device login events. JIMS collects the device IP address and operating system version.

  C. For device login events, JIMS collects the device IP address and machine name information.

  D. For user login events, JIMS collects the login source IP address and username information.

  Correct Answer: CD

• Question 77:

  A routing change occurs on an SRX Series device that involves choosing a new egress interface. In this scenario, which statement is true for all affected current sessions?

  A. The current session are torn down only if the policy-rematchoption has been enabled.

  B. The current sessions do not change.

  C. The current sessions are torn down and go through first path processing based on the new route.

  D. The current sessions might change based on the corresponding security policy.

  Correct Answer: C

• Question 78:

  Which two statements are true about virtualized SRX Series devices? (Choose two.)

  A. vSRX cannot be deployed in transparent mode.

  B. cSRX can be deployed in routed mode.

  C. cSRX cannot be deployed in routed mode.

  D. vSRX can be deployed in transparent mode.

  Correct Answer: BD

• Question 79:

  Your network uses a remote e-mail server that is used to send and receive e-mails for your users. In this scenario, what should you do to protect users from receiving malicious files through e-mail?

  A. Deploy Sky ATP IMAP e-mail protection

  B. Deploy Sky ATP MAPI e-mail protection

  C. Deploy Sky ATP SMTP e-mail protection

  D. Deploy Sky ATP POP3 e-mail protection

  Correct Answer: C

• Question 80:

  Click the Exhibit button.

  

  Referring to the configuration shown in the exhibit, which two statements are true? (Choose two.)

  A. The log is being stored on the local Routing Engine.

  B. The log is being sent to a remote server.

  C. The syslog is configured for a user facility.

  D. The syslog is configured for an info facility.

  Correct Answer: BC