2023 Juniper JN0-335 Exam Dumps Questions

Juniper certification is a highly valuable and sought-after certification for IT professionals seeking to enhance their knowledge and expertise. JN0-335 exam is specifically designed to validate the skills required to configure and maintain the JNCIS-SEC platform, which is widely used by businesses around the world. These JN0-335 exam dumps questions are specifically designed to help you prepare for the exam by testing your knowledge and providing you with valuable insights into the types of questions that you will encounter. Test free Juniper JN0-335 exam questions below.

Page 1 of 2

1. A client has attempted communication with a known command-and-control server and it has reached the configured threat level threshold.

Which feed will the clients IP address be automatically added to in this situation?

the command-and-control cloud feed

the allowlist and blocklist feed

the custom cloud feed

the infected host cloud feed

 Loading...

2. Which statement regarding Juniper Identity Management Service (JIMS) domain PC probes is true?

JIMS domain PC probes analyze domain controller security event logs at60-mmute intervals by default.

JIMS domain PC probes are triggered if no username to IP address mapping is found in the domain security event log.

JIMS domain PC probes are triggered to map usernames to group membership information.

JIMS domain PC probes are initiated by an SRX Series device to verify authentication table information.

 Loading...

3. Exhibit





Referring to the exhibit, which two statements are true? (Choose two.)

Nancy logged in to the juniper.net Active Directory domain.

The IP address of Nancy's client PC is 172.25.11.

The IP address of the authenticating domain controller is 172.25.11.140.

Nancy is a member of the Active Directory sales group.

 Loading...

4. Which two statements are correct about security policy changes when using the policy rematch feature? (Choose two.)

When a policy change includes changing the policy's action from permit to deny, all existing sessions are maintained

When a policy change includes changing the policy's source or destination address match condition, all existing sessions are dropped.

When a policy change includes changing the policy's action from permit to deny, all existing sessions are dropped.

When a policy change includes changing the policy's source or destination address match condition, all existing sessions are reevaluated.

 Loading...

5. You want to permit access to an application but block application sub.

Which two security policy features provide this capability? (Choose two.)

URL filtering

micro application detection

content filtering

APPID

 Loading...

6. You are asked to find systems running applications that increase the risks on your network. You must ensure these systems are processed through IPS and Juniper ATP Cloud for malware and virus protection.

Which Juniper Networks solution will accomplish this task?

JIMS

Encrypted Traffic Insights

UTM

Adaptive Threat Profiling

 Loading...

7. Exhibit





Referring to the exhibit, which two statements describe the type of proxy used? (Choose two.)

forward proxy

client protection proxy

server protection proxy

reverse proxy

 Loading...

8. Which two statements about unified security policies are correct? (Choose two.)

Unified security policies require an advanced feature license.

Unified security policies are evaluated after global security policies.

Traffic can initially match multiple unified security policies.

APPID results are used to determine the final security policy

 Loading...

9. You are experiencing excessive packet loss on one of your two WAN links route traffic from the degraded link to the working link

Which AppSecure component would you use to accomplish this task?

AppFW

AppQoE

AppQoS

APBR

 Loading...

10. You are asked to implement IPS on your SRX Series device.

In this scenario, which two tasks must be completed before a configuration will work? (Choose two.)

Download the IPS signature database.

Enroll the SRX Series device with Juniper ATP Cloud.

Install the IPS signature database.

Reboot the SRX Series device.

 Loading...

Page 2 of 2

11. Which two statements are correct when considering IPS rule base evaluation? (Choose two.)

IPS evaluates rules concurrently.

IPS applies the most severe action to traffic matching multiple rules,

IPS evaluates rules sequentially

IPS applies the least severe action to traffic matching multiple rules.

 Loading...

12. Your company is using the Juniper ATP Cloud free model. The current inspection profile is set at 10 MB You are asked to configure ATP Cloud so that executable files up to 30 MB can be scanned while at the same time minimizing the change in scan time for other file types.

Which configuration should you use in this scenario?

Use the CLI to create a custom profile and increase the scan limit.

Use the ATP Cloud Ul to change the default profile to increase the scan limit for all files to 30 M

Use the CLI to change the default profile to increase the scan limit for all files to 30 M

Use the ATP Cloud Ul to update a custom profile and increase the scan limit for executable files to 30 M

 Loading...

13. How does the SSL proxy detect if encryption is being used?

It uses application identity services.

It verifies the length of the packet

It queries the client device.

It looks at the destination port number.

 Loading...

14. Which two statements are true about Juniper ATP Cloud? (Choose two.)

Dynamic analysis is always performed to determine if a file contains malware.

If the cache lookup determines that a file contains malware, performed to verify the results.

Dynamic analysis is not always necessary to determine if a file contains malware.

If the cache lookup determines that a file contains malware, static analysis is not performed to verify the results.

 Loading...

15. Your manager asks you to provide firewall and NAT services in a private cloud.

Which two solutions will fulfill the minimum requirements for this deployment? (Choose two.)

a single vSRX

a vSRX for firewall services and a separate vSRX for NAT services

a cSRX for firewall services and a separate cSRX for NAT services

a single cSRX

 Loading...

16. You want to use IPS signatures to monitor traffic.

Which module in the AppSecure suite will help in this task?

AppTrack

AppQoS

AppFW

APPID

 Loading...

17. When a security policy is deleted, which statement is correct about the default behavior of active sessions allowed by that policy?

The active sessions allowed by the policy will be dropped.

The active sessions allowed by the policy will be marked as a legacy flow and will continue to be forwarded.

The active sessions allowed by the policy will be reevaluated by the cached

The active sessions allowed by the policy will continue

 Loading...

18. Which method does the loT Security feature use to identify traffic sourced from IoT devices?

The SRX Series device streams metadata from the loT device transit traffic to Juniper ATP Cloud Juniper ATP Cloud.

The SRX Series device streams transit traffic received from the IoT device to Juniper ATP Cloud.

The SRX Series device identifies loT devices using their MAC address.

The SRX Series device identifies loT devices from metadata extracted from their transit traffic.

 Loading...

19. Exhibit





Referring to the exhibit which statement is true?

SSL proxy functions will ignore the session.

SSL proxy leverages post-match results.

SSL proxy must wait for return traffic for the final match to occur.

SSL proxy leverages pre-match result

 Loading...

20. You have deployed an SRX300 Series device and determined that files have stopped being scanned.

In this scenario, what is a reason for this problem?

The software license is a free model and only scans executable type files.

The infected host communicated with a command-and-control server, but it did not download malware.

The file is too small to have a virus.

You have exceeded the maximum files submission for your SRX platform size.

 Loading...

 Loading...