[Nov 25, 2021] Get New JN0-334 Certification Practice Test Questions Exam Dumps
Real JN0-334 Exam Dumps Questions Valid JN0-334 Dumps PDF
NEW QUESTION 47
You want to deploy vSRX in Amazon Web Services (AWS) virtual private clouds (VPCs). Which two statements are true in this scenario? (Choose two.)
- A. The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Security Director instance
- B. IPsec tunnels can be used to connect vSRXs in different VPCs
- C. MPLS LSPs can be used to connect vSRXs m different VPCs
- D. The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Network Director instance
Answer: D
NEW QUESTION 48
Exhibit.
Which two statements are true about the configuration shown in the exhibit? (Choose two )
- A. The session is removed from the session table after 10 seconds of inactivity.
- B. The session is removed from the session table after 10 milliseconds of inactivity.
- C. Aggressive aging is triggered if the session table reaches 80% capacity
- D. Aggressive aging is triggered if the session table reaches 95% capacity.
Answer: A
NEW QUESTION 49
You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone.
In this scenario, which statement is true?
- A. You must enable the AppTrack feature within the User zone configuration.
- B. You must enable the AppTrack feature within the ingress interface configuration associated with the Internet zone.
- C. You must enable the AppTrack feature within the Internet zone configuration.
- D. You must enable the AppTrack feature within the interface configuration associated with the User zone.
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION 50
Which two statements about JIMS high availability are true? (Choose two.)
- A. JIMS supports high availability through the installation of the primary and secondary JIMS servers.
- B. SRX clients are configured with the shared virtual IP (VIP) address of the JIMS server.
- C. SRX clients synchronize authentication tables with both the primary and secondary JIMS servers.
- D. SRX clients are configured with the unique IP addresses of the primary and secondary JIMS servers.
Answer: A,D
NEW QUESTION 51
You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone.
In this scenario, which statement is true?
- A. You must enable the AppTrack feature within the User zone configuration.
- B. You must enable the AppTrack feature within the ingress interface configuration associated with the Internet zone.
- C. You must enable the AppTrack feature within the Internet zone configuration.
- D. You must enable the AppTrack feature within the interface configuration associated with the User zone.
Answer: A
NEW QUESTION 52
Click the Exhibit button.
You have implemented SSL proxy client protection. After implementing this feature, your users are complaining about the warning message shown in the exhibit.
Which action must you perform to eliminate the warning message?
- A. Regenerate the SRX self-signed CA certificate and include the correct organization name.
- B. Configure the SRX Series device as a trusted site in the client Web browsers.
- C. Import the SRX self-signed CA certificate into the SRX certificate public store.
- D. Import the SRX self-signed CA certificate into the client Web browsers.
Answer: D
NEW QUESTION 53
You are deploying the Junos application firewall feature in your network In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)
- A. destination IP address
- B. destination port
- C. source port
- D. source IP address
Answer: A,D
NEW QUESTION 54
Click the Exhibit button.
Referring to the exhibit, which two devices are considered to be part of the secure fabric site with Policy Enforcer? (Choose two.)
- A. SRX-1
- B. Server-1
- C. QFX-1
- D. Server-2
Answer: A,C
NEW QUESTION 55
When considering managed sessions, which configuration parameter determines how full the session table must be to implement the early age-out function?
- A. policy rematch
- B. low watermark
- C. high waremark
- D. session service timeout
Answer: C
Explanation:
Explanation
NEW QUESTION 56
Your network uses a remote e-mail server that is used to send and receive e-mails for your users.
In this scenario, what should you do to protect users from receiving malicious files thorugh e-mail?
- A. Deploy Sky ATP IMAP e-mail protection
- B. Deploy Sky ATP MAPI e-mail protection
- C. Deploy Sky ATP SMTP e-mail protection
- D. Deploy Sky ATP POP3 e-mail protection
Answer: C
NEW QUESTION 57
Which two statements are true about virtualized SRX Series devices? (Choose two.)
- A. vSRX can be deployed in transparent mode
- B. cSRX cannot be deployed in routed mode.
- C. vSRX cannot be deployed in transparent mode -
- D. cSRX can be deployed in routed mode.
Answer: A,C
NEW QUESTION 58
In an Active/Active chassis cluster deployment which chassis cluster component is responsible for RGO traffic?
- A. the master routing engine of the secondary node
- B. the primary node
- C. the secondary node
- D. the backup routing engine of the primary node
Answer: D
NEW QUESTION 59
What are two elements of a custom IDP/IPS attack object? (Choose two.)
- A. the severity of the attack
- B. the attack signature
- C. the destination zone
- D. the exempt rulebase
Answer: A,B
NEW QUESTION 60
Click the Exhibit button.
Which two statements describe the output shown in the exhibit? (Choose two.)
- A. Node 1 is passing traffic for redundancy group1.
- B. Node 0 is passing traffic for redundancy group 1.
- C. Redundancy group 1 was administratively failed over.
- D. Redundancy group 1 experienced an operational failure.
Answer: A,C
NEW QUESTION 61
Click the Exhibit button.
Referring to the exhibit, what will happen if client 172.16.128.50 tries to connect to destination
192.168.150.111 using HTTP?
- A. The client will be denied by policy p1.
- B. The client will be denied by policy p2.
- C. The client will be permitted by policy p2.
- D. The client will be permitted by policy p1.
Answer: D
NEW QUESTION 62
Your manager asks you to find employees that are watching YouTube dunng office hours Which AppSecure component would you configure to accomplish this task?
- A. AppQoS
- B. AppTrack
- C. AppQoE
- D. AppFW
Answer: B
NEW QUESTION 63
Click the Exhibit button.
Which two statements are true about the session shown in the exhibit? (Choose two.)
- A. The ALG was enabled by default.
- B. One security policy is required for bidirectional traffic flow.
- C. Two security policies are required for bidirectional traffic flow.
- D. The ALG was enabled by manual configuration.
Answer: C,D
NEW QUESTION 64
A routing change occurs on an SRX Series device that involves choosing a new egress interface.
In this scenario, which statement is true for all affected current sessions?
- A. The current session are torn dowm only if the policy-rematch option has been enabled.
- B. The current sessions are torn down and go through first path processing based on the new route.
- C. The current sessions might change based on the corresponding security policy.
- D. The current sessions do not change.
Answer: D
Explanation:
https://forums.juniper.net/t5/ScreenOS-Firewalls-NOT-SRX/Affect-of-Route-change-on-Session/m-p/27810#M11385
NEW QUESTION 65
Which statement about the control link in a chassis cluster is correct?
- A. The control messages sent over the link are encrypted by default.
- B. The control link heartbeats contain the configuration file of the nodes.
- C. A cluster can have redundant control links.
- D. Recovering from a control link failure requires a reboot.
Answer: C
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-chassis-cluster-dual- control-links.html
NEW QUESTION 66
Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)
- A. JIMS synchronizes Active Directory authentication information between a primary and secondary JIMS server
- B. JIMS forwards Active Directory authentication information to SRX Series client devices.
- C. JIMS replicates Active Directory authentication information to non-trusted Active Directory domain controllers
- D. JIMS collects and maintains a database of authentication information from Active Directory domains
Answer: A,B
NEW QUESTION 67
Which default protocol and port are used for JIMS to SRX client communication?
- A. RPC over TCP, port 135
- B. HTTPS over TCP: port 443
- C. WMI over TCP; port 389
- D. ADSI over TCP; port 389
Answer: B
NEW QUESTION 68
What are two examples of RTOs? (Choose two.)
- A. IPsec SA entries
- B. fabric link probes
- C. session table entries
- D. control link heartbeats
Answer: B,C
NEW QUESTION 69
You want to collect events and flows from third-party vendors. Which solution should you deploy to accomplish this task?
- A. Contrail
- B. JSA
- C. Log Director
- D. Policy Enforcer
Answer: D
NEW QUESTION 70
Click the Exhibit button.
You have configured the scheduler shown in the exhibit to prevent users from accessing certain websites from 1:00 PM to 3:00 PM Monday through Friday. This policy will remain in place until further notice. When testing the policy, you determine that the websites are still accessible during the restricted times.
In this scenario, which two actions should you perform to solve the problem? (Choose two.)
- A. Use the 13:00 parameter and the 15:00 parameter when specifying the time.
- B. Add the saturday exclude parameter and the sunday exclude parameter to ensure weekends are excluded from the schedule.
- C. Use the PM parameter when specifying the time in the schedule.
- D. Use the start-date parameter to specify the date for each Monday and use the stop-date parameter to specify the date for each Friday.
Answer: A,B
NEW QUESTION 71
What is the maximum number of supported interfaces on a vSRX hosted in a VMware environment?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION 72
......
JN0-334 Exam Dumps - PDF Questions and Testing Engine: https://preptorrent.actual4exams.com/JN0-334-real-braindumps.html