JN0-334 Exam Training Practice Tests (Juniper Security, Specialist (JNCIS-SEC))]

Question 1

Click the Exhibit button.

Referring to the SRX Series flow module diagram shown in the exhibit, where is IDP/IPS processed?

A. Security Policy B. Forwarding Lookup C. Screens D. Services ALGs

Correct Answer: A

Question 2

Which feature supports sandboxing of zero-day attacks?

A. ALGs B. high availability C. SSL proxy D. Sky ATP

Correct Answer: D

Question 3

How many nodes are configurable in a chassis cluster using SRX Series devices?

A. 4 B. 2 C. 8 D. 6

Correct Answer: B

Question 4

When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)

A. If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is decrypted.
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-ssl-proxy.html B. A security policy can only reference a client-protection SSL proxy profile or a server-protection SSL proxy profile. C. If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is not decrypted. D. A security policy can reference both a client-protection SSL proxy profile and a server-protection proxy profile.

Correct Answer: B,C

Question 5

Click the Exhibit button.

You have deployed Sky ATP to protect your network from attacks so that users are unable to download malicious files. However, after a user attempts to download a malicious file, they are still able to communicate through the SRX Series device.
Referring to the exhibit, which statement is correct?

A. Lower the verdict threshold in the advanced anti-malware policy. B. Remove the fallback options in the advanced anti-malware policy. C. Configure a security intelligence policy and apply it to the security policy. D. Change the security policy from a standard security policy to a unified security policy.

Correct Answer: C

Question 6

What is the correct step sequence used when Sky ATP analyzes a file?

A. cache lookup -> antivirus scanning -> static analysis -> dynamic analysis B. cache lookup -> static analysis -> antivirus scanning -> dynamic analysis C. static analysis -> cache lookup -> antivirus scanning -> dynamic analysis D. dynamic analysis -> static analysis -> antivirus scanning -> cache lookup

Correct Answer: A

Question 7

What is the maximum number of supported interfaces on a vSRX hosted in a VMware environment?

A. 4 B. 12 C. 10 D. 3

Correct Answer: C

Question 8

Which of the following lists the correct order that the Sky ATP pipeline evaluates traffic?

A. Cache lookup. Static Analysis. Dynamic Analysis. Antivirus Scanning B. Static Analysis. Cache lookup. Antivirus Scanning, Dynamic Analysis C. Cache lookup. Antivirus Scanning, Static Analysis, Dynamic Analysis

Correct Answer: C

Question 9

What is the default session timeout value for ICMP and UDP traffic?

A. 30 minutes B. 60 seconds C. 5 minutes D. 30 seconds

Correct Answer: B

Question 10

Which three statements are true about the difference between cSRX-based virtual security deployments and vSRX-based virtual security deployments? (Choose three.)

A. vSRX provides Layer 2 to Layer 7 secure services and cSRX provides Layer 4 to Layer 7 secure services. B. vSRX provides faster deployment time and faster reboots compared to cSRX. C. cSRX requires less storage and memory space for a given deployment than vSRX-based solutions. D. vSRX and cSRX both provide Layer 2 to Layer 7 secure services. E. cSRX-based solutions are more scalable than vSRX-based solutions.

Correct Answer: A,C,E

Juniper Security, Specialist (JNCIS-SEC) - JN0-334 Exam Practice Test