JN0-335 Exam Training Practice Tests (Juniper Security, Specialist (JNCIS-SEC))]

Question 1

You want to manually failover the primary Routing Engine in an SRX Series high availability cluster pair.
Which step is necessary to accomplish this task?

A. Implement the control link recover/ solution before adjusting the priorities. B. Adjust the priority in the configuration on the secondary node. C. Manually request the failover and identify the secondary node D. Issue the set chassis cluster disable reboot command on the primary node.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Which two statements are correct about chassis clustering? (Choose two.)

A. A system reboot is required to activate changes to the cluster. B. The node ID is used to identify each device in the chassis cluster. C. The cluster ID is used to identify each device in the chassis cluster. D. The node ID value ranges from 1 to 255.

Correct Answer: A,B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

You are asked to find systems running applications that increase the risks on your network. You must ensure these systems are processed through IPS and Juniper ATP Cloud for malware and virus protection.
Which Juniper Networks solution will accomplish this task?

A. JIMS B. UTM C. Encrypted Traffic Insights D. Adaptive Threat Profiling

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Which statement is true about high availability (HA) chassis clusters for the SRX Series device?

A. There can be active/passive or active/active clusters. B. HA clusters must use NAT to prevent overlapping subnets between the nodes. C. Cluster nodes must be connected through a Layer 2 switch. D. Cluster nodes require an upgrade to HA compliant Routing Engines.

Correct Answer: A

Question 5

Which statement describes the AppTrack module in AppSecure?

A. The AppTrack module identifies the applications that are present in network traffic. B. The AppTrack module provides enforcement with the ability to block traffic, based on specific applications. C. The AppTrack module provides control by the routing of traffic, based on the application. D. The AppTrack module provides visibility and volumetric reporting of application usage on the network.

Correct Answer: A

Question 6

Which of the following lists the correct order that the Sky ATP pipeline evaluates traffic?

A. Cache lookup. Static Analysis. Dynamic Analysis. Antivirus Scanning B. Static Analysis. Cache lookup. Antivirus Scanning, Dynamic Analysis C. Cache lookup. Antivirus Scanning, Static Analysis, Dynamic Analysis

Correct Answer: C

Question 7

Which statement about the control link in a chassis cluster is correct?

A. Recovering from a control link failure requires a reboot. B. The control link heartbeats contain the configuration file of the nodes. C. A cluster can have redundant control links. D. The control messages sent over the link are encrypted by default.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

Which two statements are true about the fab interface in a chassis cluster? (Choose two.)

A. The fab link does not support fragmentation. B. The fab link supports traditional interface features. C. The physical interface for the fab link must be specified in the configuration. D. The Junos OS supports only one fab link.

Correct Answer: B,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

Which two settings must be enabled on the hypervisor in a vSRX deployment to ensure proper chassis cluster operation? (Choose two.)

A. Control links must operate in promiscuous mode. B. Fabric links must have an MTU of 9000. C. Control links must have an MTU of 9000. D. Fabric links must operate in promiscuous mode.

Correct Answer: A,B

Question 10

Click the Exhibit button. You are asked to create a security policy that will automatically add infected hosts to the infected hosts feed and block further communication through the SRX Series device.
What needs to be added to this configuration to complete this task?

A. Add logging to the permit portion of the security policy. B. Add a match rule to the security policy with an appropriate threat level. C. Add a security intelligence policy to the permit portion of the security policy. D. Add an action to the permit portion of the security policy.

Correct Answer: C

Juniper Security, Specialist (JNCIS-SEC) - JN0-335 Exam Practice Test