Best Quality Juniper JN0-334 Exam Questions ITCertMagic Realistic Practice Exams [2021]
Critical Information To Security, Specialist (JNCIS-SEC) Pass the First Time
NEW QUESTION 43
How many nodes are configurable in a chassis cluster using SRX Series devices?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION 44
What are three primary functions of JATP? (Choose three.)
- A. analytics
- B. detection
- C. encryption
- D. optimization
- E. mitigation
Answer: A,B,E
NEW QUESTION 45
You are troubleshooting advanced policy-based routing (APBR).
Which two actions should you perform in this scenario? (Choose two.)
- A. Review the APBR statistics for matching rules and route modifications.
- B. Inspect the application system cache for the application entry.
- C. Verify that the APBR profiles are applied to the egress zone.
- D. Verity inet.0 for correct route leaking.
Answer: A,B
NEW QUESTION 46
Click the exhibit button.
Referring to the exhibit, which statement is true?
- A. Packets entering the interface are getting dropped because the interface is not bound to a zone.
- B. TCP packets entering the interface are failing the TCP sequence check.
- C. Packets entering the interface are being dropped because of a stateless filter.
- D. Packets entering the interface matching an ALG are getting dropped.
Answer: A
NEW QUESTION 47
Click the Exhibit button.
Which two statements are true about the configuration shown in the exhibit? (Choose two.)
- A. Aggressive aging is triggered if the session table reaches 95% capacity.
- B. The session is removed from the session table after 10 milliseconds of inactivity.
- C. Aggressive aging is triggered if the session table reaches 80% capacity.
- D. The session is removed from the session table after 10 seconds of inactivity.
Answer: A,D
NEW QUESTION 48
You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution.
Which action would accomplish this task?
- A. Configure the SAML settings.
- B. Configure whitelist rules
- C. Configure YARA rules.
- D. Configure a new anti-virus configuration rule.
Answer: C
Explanation:
Explanation/Reference:
NEW QUESTION 49
Which two statements describe superflows in Juniper Secure Analytics? (Choose two.)
- A. Superflows combine many flows into a single flow.
- B. Superflows can negatively impact licensing limitations.
- C. Disk space usage is reduced on the JSA device.
- D. JSA only supports Type A and Type C superflows.
Answer: A,C
NEW QUESTION 50
You are configuring a client-protection SSL proxy profile.
Which statement is correct in this scenario?
- A. A server certificate is used but a root certificate authority is not used.
- B. A server certificate is not used but a root certificate authority is used.
- C. A server certificate and a root certificate authority are both used.
- D. A server certificate and root certificate authority are not used.
Answer: C
NEW QUESTION 51
Click the Exhibit button.
Which two statements describe the output shown in the exhibit? (Choose two.)
- A. Redundancy group 1 experienced an operational failure.
- B. Node 1 is passing traffic for redundancy group1.
- C. Node 0 is passing traffic for redundancy group 1.
- D. Redundancy group 1 was administratively failed over.
Answer: B,D
NEW QUESTION 52
A routing change occurs on an SRX Series device that involves choosing a new egress interface.
In this scenario, which statement is true for all affected current sessions?
- A. The current sessions might change based on the corresponding security policy.
- B. The current sessions do not change.
- C. The current session are torn down only if the policy-rematchoption has been enabled.
- D. The current sessions are torn down and go through first path processing based on the new route.
Answer: D
NEW QUESTION 53
Click the Exhibit button.
Referring to the exhibit, which statement is true?
- A. Malicious HTTP file downloads are always blocked.
- B. Hosts are always able to communicate through the SRX Series device no matter the threat score assigned to them on the infected host feed.
- C. Hosts are unable to communicate through the SRX Series device after being placed on the infected host feed with a high enough threat score.
- D. Malicious HTTP file downloads are never blocked.
Answer: C
NEW QUESTION 54
Click the Exhibit button.
Users at a remote office are unable to access an FTP server located at the remote corporate data center as expected. The remote FTP server is listening on the non-standard TCP port 2121.
Referring to the exhibit, what is causing the problem?
- A. Two custom FTP applications must be defined to allow bidirectional FTP communication through the SRX Series device.
- B. The FTP clients must be configured to listen on non-standard client ports for the FTP data channel negotiations to succeed.
- C. A new security policy must be defined between the untrust and trust zones.
- D. The custom FTP application definition does not have the FTP ALG enabled.
Answer: C
NEW QUESTION 55
Exhibit.
You want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer To complete this task, where should you configure the default gateway for the User-1 device?
- A. the irb interface on QFX-2
- B. the interface on SRX-1 that connects to QFX-2
- C. the interface of QFX-1 that connects to User-1
- D. the irb interface on QFX-1
Answer: A
NEW QUESTION 56
What information does JIMS collect from domain event log sources? (Choose two.)
- A. For user login events, JIMS collects the login source IP address and username information.
- B. For user login events, JIMS collects the username and group membership information.
- C. For device login events. JIMS collects the devide IP address and operating system version.
- D. For device login events, JIMS collects the device IP address and machine name information.
Answer: A,D
NEW QUESTION 57
Click the Exhibit button.
The output shown in the exhibit is displayed in which format?
- A. sd-syslog
- B. syslog
- C. binary
- D. WELF
Answer: B
NEW QUESTION 58
When considering managed sessions, which configuration parameter determines how full the session table must be to implement the early age-out function? (Choose two)
- A. session service timeout
- B. high waremark
- C. policy rematch
- D. low watermark
Answer: A,B
NEW QUESTION 59
After performing a software upgrade on an SRX5800 chassis cluster, you notice that node1 is in the primary state and node0 is in the backup state. Your network standards dictate that node0 should be in the primary state.
In this scenario, which command should be used to comply with the network standards?
- A. request chassis cluster failover redundancy-group 0 node 0
- B. request chassis cluster failover redundancy-group 254 node 1
- C. request chassis cluster failover redundancy-group 0 node 1
- D. request chassis cluster failover redundancy-group 254 mode 0
Answer: A
NEW QUESTION 60
Which security log message formal reduces the consumption of CPU and storage?
- A. BSD syslog
- B. binary
- C. WELF
- D. structured syslog
Answer: B
NEW QUESTION 61
Click the Exhibit button.
Referring to the SRX Series flow module diagram shown in the exhibit, where is IDP/IPS processed?
- A. Screens
- B. Security Policy
- C. Forwarding Lookup
- D. Services ALGs
Answer: D
NEW QUESTION 62
Click the Exhibit button.
Host A is attempting to connect to Host B using the domain name, which is tied to a public IP address. All attempts to connect to Host B have failed. You have examined the configuration on your SRX340 and determined that a NAT policy is required.
Referring to the exhibit, which two NAT types will allow Host A to connect to Host B? (Choose two.)
- A. static NAT
- B. destination NAT
- C. source NAT
- D. NAT-T
Answer: A,B
NEW QUESTION 63
Click the Exhibit button.
Referring to the configuration shown in the exhibit, which two statements are true? (Choose two.)
- A. The syslog is configured for an info facility.
- B. The syslog is configured for a user facility.
- C. The log is being sent to a remote server.
- D. The log is being stored on the local Routing Engine.
Answer: B,C
Explanation:
https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/syslog-edit-system.html
NEW QUESTION 64
You want to collect events and flows from third-party vendors.
Which solution should you deploy to accomplish this task?
- A. JSA
- B. Contrail
- C. Policy Enforcer
- D. Log Director
Answer: A
NEW QUESTION 65
Click to the Exhibit button.
Referring to the exhibit, which two statements are true? (Choose two.)
- A. Interfaces ge-0/0/0.0 and ge-0/0/1.0 will allow SSH connections.
- B. Interface ge-0/0/0 will not accept SSH connections.
- C. Interface ge-0/0/1.0 will respond to pings.
- D. Interface ge-0/0/0.0 will respond to pings.
Answer: A,C
NEW QUESTION 66
You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution.
Which action would accomplish this task?
- A. Configure the SAML settings.
- B. Configure whitelist rules
- C. Configure YARA rules.
- D. Configure a new anti-virus configuration rule.
Answer: C
NEW QUESTION 67
......
JN0-334 EXAM DUMPS WITH GUARANTEED SUCCESS: https://www.itcertmagic.com/Juniper/real-JN0-334-exam-prep-dumps.html