File Info
| Exam | Security, Specialist |
| Number | JN0-334 |
| File Name | Juniper.JN0-334.BrainDumps.2020-05-12.39q.vcex |
| Size | 621 KB |
| Posted | May 12, 2020 |
| Download | Juniper.JN0-334.BrainDumps.2020-05-12.39q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
What are two examples of RTOs? (Choose two.)
- IPsec SA entries
- session table entries
- fabric link probes
- control link heartbeats
Correct answer: CD
Question 2
Click the Exhibit button.
Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer.
To complete this task, where should you configure the default gateway for the User-1 device?
- the irb interface on QFX-2
- the irb interface on QFX-1
- the interface of QFX-1 that connects to User-1
- the interface on SRX-1 that connects to QFX-2
Correct answer: B
Question 3
Which three features are parts of Juniper Networks’ AppSecure suite? (Choose three.)
- AppQoE
- APBR
- Secure Application Manager
- AppQoS
- AppFormix
Correct answer: ABD
Explanation:
Reference: https://www.juniper.net/documentation/en_US/junos/information-products/pathway-pages/security/security-application-identification.pdf Reference:
https://www.juniper.net/documentation/en_US/junos/information-products/pathway-pages/security/security-application-identification.pdf
Question 4
Which statement is true about high availability (HA) chassis clusters for the SRX Series device?
- Cluster nodes require an upgrade to HA compliant Routing Engines.
- Cluster nodes must be connected through a Layer 2 switch.
- There can be active/passive or active/active clusters.
- HA clusters must use NAT to prevent overlapping subnets between the nodes.
Correct answer: C
Question 5
What are two types of attack objects used by IPS on SRX Series devices? (Choose two.)
- protocol anomaly-based attacks
- spam-based attacks
- signature-based attacks
- DDoS-based attacks
Correct answer: AC
Question 6
You are asked to improve resiliency for individual redundancy groups in an SRX4600 chassis cluster.
Which two features would accomplish this task? (Choose two.)
- IP address monitoring
- control link recovery
- interface monitoring
- dual fabric links
Correct answer: BD
Question 7
What are two elements of a custom IDP/IPS attack object? (Choose two.)
- the attack signature
- the severity of the attack
- the destination zone
- the exempt rulebase
Correct answer: AB
Question 8
Click the Exhibit button.
Referring to the configuration shown in the exhibit, which two statements are true? (Choose two.)
- The log is being stored on the local Routing Engine.
- The log is being sent to a remote server.
- The syslog is configured for a user facility.
- The syslog is configured for an info facility.
Correct answer: BC
Question 9
Which two statements are true about virtualized SRX Series devices? (Choose two.)
- vSRX cannot be deployed in transparent mode.
- cSRX can be deployed in routed mode.
- cSRX cannot be deployed in routed mode.
- vSRX can be deployed in transparent mode.
Correct answer: BD
Question 10
A routing change occurs on an SRX Series device that involves choosing a new egress interface.
In this scenario, which statement is true for all affected current sessions?
- The current session are torn dowm only if the policy-rematch option has been enabled.
- The current sessions do not change.
- The current sessions are torn down and go through first path processing based on the new route.
- The current sessions might change based on the corresponding security policy.
Correct answer: C
