Try JN0-335 Free Now! Real Exam Question Answers Updated [Apr 03, 2025]
Get Ready to Pass the JN0-335 exam with Juniper Latest Practice Exam
The JN0-335 exam is a specialist-level exam, which means that it is designed for individuals with a solid understanding of networking basics and security concepts. Candidates who successfully pass the exam will earn the Juniper Networks Certified Specialist Security (JNCIS-SEC) certification, which is recognized worldwide as a symbol of excellence in network security.
The JN0-335 exam is intended for professionals who have experience in network security and want to specialize in Juniper security technologies. Candidates who pass the exam can demonstrate their proficiency in Juniper security devices, such as the SRX Series Services Gateways, and their ability to configure and manage these devices. JN0-335 exam also covers security technologies and concepts, making it an ideal way for professionals to expand their knowledge and skills in this field.
Juniper JN0-335 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
NEW QUESTION # 107
Click the Exhibit button.
Which two statements are true about the configuration shown in the exhibit? (Choose two.)
- A. The session is removed from the session table after 10 seconds of inactivity.
- B. Aggressive aging is triggered if the session table reaches 80% capacity.
- C. Aggressive aging is triggered if the session table reaches 95% capacity.
- D. The session is removed from the session table after 10 milliseconds of inactivity.
Answer: A,C
NEW QUESTION # 108
Which statement about security policy schedulers is correct?
- A. A policy without a defined scheduler will not become active
- B. When the scheduler is disabled, the policy will still be available.
- C. A policy can have multiple schedulers.
- D. Multiple policies can use the same scheduler.
Answer: D
Explanation:
Schedulers can be defined and reused by multiple policies, allowing for more efficient management of policy activation and deactivation. This can be particularly useful for policies that need to be activated during specific time periods, such as business hours or maintenance windows.
NEW QUESTION # 109
Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)
- A. JIMS forwards Active Directory authentication information to SRX Series client devices.
- B. JIMS collects and maintains a database of authentication information from Active Directory domains.
- C. JIMS synchronizes Active Directory authentication information between a primary and secondary JIMS server.
- D. JIMS replicates Active Directory authentication information to non-trusted Active Directory domain controllers.
Answer: B,C
NEW QUESTION # 110
When a security policy is deleted, which statement is correct about the default behavior of active sessions allowed by that policy?
- A. The active sessions allowed by the policy will be reevaluated by the cached
- B. The active sessions allowed by the policy will be dropped.
- C. The active sessions allowed by the policy will continue
- D. The active sessions allowed by the policy will be marked as a legacy flow and will continue to be forwarded.
Answer: B
Explanation:
When a security policy is deleted, the active sessions allowed by the policy will be dropped. The default behavior is that all active sessions allowed by the policy will be terminated and the traffic will no longer be forwarded. There is no way to mark the active sessions as a legacy flow or to reevaluate them by the cached rules.
According to Juniper Networks Security, Specialist (JNCIS-SEC) Study Guide, when a security policy is deleted, the active sessions allowed by that policy will be dropped. This behavior is the default behavior of the device. There is no way to mark the active sessions as a legacy flow or to re-evaluate them against cached rules. The device will terminate the active sessions and will no longer forward traffic for those sessions.
NEW QUESTION # 111
Which two devices would you use for DDoS protection with Policy Enforcer? (Choose two.)
- A. MX
- B. QFX
- C. vMX
- D. vQFX
Answer: A,B
Explanation:
Explanation
Policy Enforcer is a Junos Space Security Director component that allows updated security policies to be deployed across Juniper SRX Series firewalls, MX Series 5G Universal Routing Platforms, EX Series Ethernet Switches, QFX Series Switches, and third-party network devices1. Policy Enforcer can leverage the DDoS protection feature of Juniper devices to detect and mitigate DDoS attacks on the network. The DDoS protection feature is based on two main components: the classification of host-bound control plane traffic and a hierarchical set of individual- and aggregate-level policers that cap the volume of control plane traffic that each protocol type is able to send to the Routing Engine (RE) for processing2. The DDoS protection feature is supported on MX Series routers and QFX Series switches, among other devices3. Therefore, the correct devices to use for DDoS protection with Policy Enforcer are MX and QFX.
The other options are not correct for the following reasons:
vQFX is a virtual switch that emulates the QFX Series switches for testing and development purposes. It does not support the DDoS protection feature4.
vMX is a virtual router that emulates the MX Series routers for testing and development purposes. It does not support the DDoS protection feature.
References: Policy Enforcer DDoS Protection Case Study Protection against distributed denial of service (DDoS) attacks vQFX10000 Overview [vMX Overview]
NEW QUESTION # 112
You have deployed JSA and you need to view events and network activity that match rule criteria.
You must view this data using a single interface.
Which JSA feature should you use in this scenario?
- A. Network Activity
- B. Offense Manager
- C. Assets
- D. Log Collector
Answer: A
NEW QUESTION # 113
Click the Exhibit button.
Referring to the exhibit, which two values in the JIMS SRX client configuration must match the values configured on the SRX client? (Choose two.)
- A. Client ID
- B. Token Lifetime
- C. Client Secret
- D. IPv6 Reporting
Answer: A,C
NEW QUESTION # 114
Which two statements describe SSL proxy on SRX Series devices? (Choose two.)
- A. SSL proxy relies on Active Directory to provide secure communication.
- B. SSL proxy is supported when enabled within logical systems.
- C. Client-protection is also known as reverse proxy.
- D. SSL proxy supports TLS version 1.2.
Answer: B,D
NEW QUESTION # 115
You want to show tabular data for operational mode commands.
In this scenario, which logging parameter will provide this function?
- A. session-close
- B. count
- C. permit
- D. session-init
Answer: B
Explanation:
Explanation
The count logging parameter displays the number of packets that match the firewall filter term in a tabular format. The count parameter also creates a counter that you can view with the show firewall command. The other logging parameters (permit, session-init, and session-close) do not show tabular data, but rather log the packets that match the term to a system log file or a user-specified file. References:
Understanding Firewall Filter Counters
Configuring Firewall Filter Counters
show firewall
NEW QUESTION # 116
Referring to the exhibit which statement is true?
- A. SSL proxy leverages post-match results.
- B. SSL proxy leverages pre-match result
- C. SSL proxy must wait for return traffic for the final match to occur.
- D. SSL proxy functions will ignore the session.
Answer: B
NEW QUESTION # 117
You are asked to ensure that if the session table on your SRX Series device gets close to exhausting its resources, that you enforce a more aggress.ve age-out of existing flows.
In this scenario, which two statements are correct? (Choose two.)
- A. The high-watermark configuration specifies the percentage of how much of the session table can be allocated before applying a more aggressive age-out timer
- B. The high-watermark configuration specifies the percentage of how much of the session table is left before disabling a more aggressive age- out timer.
- C. The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the low-watermark value is met.
- D. The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the high-watermark value is met.
Answer: A,D
Explanation:
Explanation
The session table is a limited resource for SRX Series devices. If the session table is full, any new sessions will be rejected by the device. The aggressive session-aging mechanism accelerates the session timeout process when the number of sessions in the session table exceeds the specified high-watermark threshold. This mechanism minimizes the likelihood that the SRX Series devices will reject new sessions when the session table becomes full1. To perform aggressive session aging, you need to configure the following parameters1:
early-ageout -During aggressive session aging, the sessions with an age-out time lower than the early-ageout threshold are marked as invalid. The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the high-watermark value is met. For example, if you set the early-ageout to 30 seconds, any session that has been inactive for at least 30 seconds will be aged out when the high-watermark is reached2.
high-watermark -The device performs aggressive session aging when the number of sessions in the session table exceeds the high-watermark threshold. The high-watermark configuration specifies the percentage of how much of the session table can be allocated before applying a more aggressive age-out timer. For example, if you set the high-watermark to 90 percent, the device will start aging out sessions more aggressively when the session table reaches 90 percent of its capacity3.
Therefore, the correct statements are B and D.
References: Understanding Aggressive Session Aging high-watermark early-ageout
NEW QUESTION # 118
You are configuring a client-protection SSL proxy profile.
Which statement is correct in this scenario?
- A. A server certificate and a root certificate authority are both used.
- B. A server certificate is used but a root certificate authority is not used.
- C. A server certificate is not used but a root certificate authority is used.
- D. A server certificate and root certificate authority are not used.
Answer: A
NEW QUESTION # 119
Which statement about security policy schedulers is correct?
- A. A policy without a defined scheduler will not become active
- B. When the scheduler is disabled, the policy will still be available.
- C. A policy can have multiple schedulers.
- D. Multiple policies can use the same scheduler.
Answer: D
Explanation:
Explanation
Security policy schedulers are a feature that allows you to activate or deactivate a policy for a specified time period. You can create schedulers for a single or recurrent time slot, and apply them to one or more policies. A policy can only have one scheduler associated with it, but a scheduler can have multiple policies associated with it. When a scheduler is active, the policy is available for policy lookup. When a scheduler is inactive, the policy is unavailable for policy lookup. A policy without a defined scheduler will always be active, unless it is explicitly disabled. References:
Scheduling Security Policies
schedulers (Security Policies)
Security Policy Schedulers
scheduler (Security Policies)
NEW QUESTION # 120
Referring to the exhibit, which two statements are true? (Choose two.)
- A. Nancy logged in to the juniper.net Active Directory domain.
- B. Nancy is a member of the Active Directory sales group.
- C. The IP address of the authenticating domain controller is 172.25.11.140.
- D. The IP address of Nancy's client PC is 172.25.11.
Answer: A,D
NEW QUESTION # 121
Which two sources are used by Juniper Identity Management Service (JIMS) for collecting username and device IP addresses? (Choose two.)
- A. DNS
- B. OpenLDAP service ports
- C. Microsoft Exchange Server event logs
- D. Active Directory domain controller event logs
Answer: A,D
Explanation:
Juniper Identity Management Service (JIMS) collects username and device IP addresses from both DNS and Active Directory domain controller event logs. DNS is used to resolve hostnames to IP addresses, while Active Directory domain controller event logs are used to get information about user accounts, such as when they last logged in.
NEW QUESTION # 122
While working on an SRX firewall, you execute the show security policies policy-name <name> detail command.
Which function does this command accomplish?
- A. It shows the system log files for the local SRX Series device.
- B. It identifies the different custom policies enabled.
- C. It displays details about the default security policy.
- D. It shows policy counters for a configured policy.
Answer: D
Explanation:
The function that the show security policies policy-name <name> detail command accomplishes is showing policy counters for a configured policy. Policy counters are statistics that indicate how many times a policy has been matched by traffic and what actions have been taken by the policy. Policy counters can help you monitor and troubleshoot the performance and effectiveness of your security policies. The show security policies policy-name <name> detail command displays detailed information about a specific policy, such as its source zone, destination zone, description, state, hit count, byte count, packet count, action count, and session count.
NEW QUESTION # 123
What are two types of collectors for the JATP core engine? (Choose two.)
- A. Web
- B. SNMP
- C. e-mail
- D. telemetry
Answer: A,C
NEW QUESTION # 124
You administer a JSA host and want to include a rule that sets a threshold for excessive firewall denies and sends an SNMP trap after receiving related syslog messages from an SRX Series firewall.
Which JSA rule type satisfies this requirement?
- A. event
- B. common
- C. flow
- D. offense
Answer: A
Explanation:
To include a rule that sets a threshold for excessive firewall denies and sends an SNMP trap after receiving related syslog messages from an SRX Series firewall, you need to use an event rule type in JSA. An event rule type allows you to create custom rules based on the events that are collected and normalized by JSA from various sources, such as firewalls, routers, switches, servers, and so on. You can define the conditions, tests, and actions for an event rule, such as matching a specific event name, setting a threshold for the number of occurrences, and sending an SNMP trap to a specified host. Reference := Creating a Custom Rule, Customizing the SNMP Trap Output
NEW QUESTION # 125
You are building a VPN tunnel between two SRX Series devices. You want the tunnel to always be established, even if there is no traffic to send. Which action would be used to achieve this goal?
- A. Configure establish-tunnels with the immediately parameter.
- B. Configure an RPM probe to constantly ping across the links.
- C. Configure the OSPF demand-circuit feature on the tunnel interface.
- D. Configure vpn-monitor with the optimized parameter on the tunnel.
Answer: A
NEW QUESTION # 126
You just finished setting up your command-and-control (C&C) category with Juniper ATP Cloud.
You notice that all of the feeds have zero objects in them.
Which statement is correct in this scenario?
- A. No action is required, the feeds take a few minutes to download.
- B. The security intelligence policy must be configured; on a unified security policy
- C. Set the maximum C&C entries within the Juniper ATP Cloud GUI.
- D. Use the commit full command to start the download.
Answer: A
Explanation:
According to the Juniper Networks JNCIS-SEC Study Guide, when you set up your command- and- control (C&C) category with Juniper ATP Cloud, all of the feeds will initially have zero objects in them. This is normal, as it can take a few minutes for the feeds to download. No action is required in this scenario and you will notice the feeds start to populate with objects once the download is complete.
NEW QUESTION # 127
......
Pass Your Next JN0-335 Certification Exam Easily & Hassle Free: https://www.exams4collection.com/JN0-335-latest-braindumps.html
Get Prepared for Your JN0-335 Exam With Actual Juniper Study Guide!: https://drive.google.com/open?id=1NMUoQb1SqYTZkYVLuSXN-mWJCOUthDzi
