[Q13-Q36] Real JN0-334 dumps – Real Juniper dumps PDF in here [Sep-2022]

NO.13 You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone.
In this scenario, which statement is true?

You must enable the AppTrack feature within the Internet zone configuration.

You must enable the AppTrack feature within the ingress interface configuration associated with the Internet zone.

You must enable the AppTrack feature within the interface configuration associated with the User zone.

You must enable the AppTrack feature within the User zone configuration.

NO.14 Which two statements are true when implementing source NAT on an SRX Series device? (Choose two.)

Source NAT is applied before the security policy search.

Source NAT is applied after the route table lookup.

Source NAT is applied before the route table lookup.

Source NAT is applied after the security policy search.

NO.15 Which statement describes the function of screen options?

Screen options encrypt transit traffic in a tunnel.

Screen options protect against various attacks on traffic entering a security device.

Screen options translate a private address to a public address.

Screen options restrict or permit users individually or in a group.

NO.16 What is the correct ordering of Junos policy evaluation from first to last?

global policy > zone-based policy > default policy

default policy > zone-based policy > global policy

global policy > default policy > zone-based policy

zone-based policy > global policy > default policy

NO.17 Which two statements about JIMS high availability are true? (Choose two.)

JIMS supports high availability through the installation of the primary and secondary JIMS servers.

SRX clients are configured with the shared virtual IP (VIP) address of the JIMS server.

SRX clients are configured with the unique IP addresses of the primary and secondary JIMS servers.

SRX clients synchronize authentication tables with both the primary and secondary JIMS servers.

NO.18 Which security log message format reduces the consumption of CPU and storage?

WELF

BSD syslog

binary

structured syslog

NO.19 Click the Exhibit button.

You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172.25.11.0/24 subnet to the Internet. You create a policy named permit – http between the trust and untrust zones that permits HTTP traffic.
When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.
Which two actions would correct the error? (Choose two.)

Create a custom application named http at the [edit applications] hierarchy.

Execute the Junos commit full command to override the error and apply the configuration.

Modify the security policy to use the built-in junos-http application.

Issue the rollback 1command from the top of the configuration hierarchy and attempt the commit again.

NO.20 Which two protocols are supported for Sky ATP advanced anti-malware scanning? (Choose two.)

POP3

MAPI

IMAP

SMTP

NO.21 You are deploying the Junos application firewall feature in your network In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)

destination port

source port

destination IP address

source IP address

NO.22 Exhibit.

You need to have the JATP solution analyze jar, xls, and doc files
Referring to the exhibit, which two file types must be selected to accomplish this task? (Choose two.)

Java

library

document

executable

NO.23 Exhibit.

You are configuring an SRX chassis cluster with the node-specific hostname and management address.
Referring to the exhibit, which configuration completes this requirement?
A)

B)

C)

D)

Option A

Option B

Option C

Option D

NO.24 You need to configure an IPsec tunnel between a remote site and a hub site. The SRX Series device at the remote site receives a dynamic IP address on the external interface that you will use for IPsec.
Which feature would you need to configure in this scenario?

NAT-T

crypto suite B

aggressive mode

IKEv2

NO.25 Click the Exhibit button.

Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer.
To complete this task, where should you configure the default gateway for the User-1 device?

the irb interface on QFX-2

the irb interface on QFX-1

the interface of QFX-1 that connects to User-1

the interface on SRX-1 that connects to QFX-2

NO.26 A routing change occurs on an SRX Series device that involves choosing a new egress interface In this scenario, which statement is true for all affected current sessions?

The current sessions are torn down only if the policy-rematch option has been enabled.

The current sessions do not change

The current sessions are torn down and go through first path processing based on the new route.

The current sessions might change based on the corresponding security policy

NO.27 What are two valid JIMS event log sources? (Choose two )

Microsoft Windows Server 2012 audit logs

Microsoft Active Directory server event logs

Microsoft Exchange Server event logs

Microsoft Active Directory audit logs

NO.28 Click the Exhibit button.

The output shown in the exhibit is displayed in which format?

syslog

WELF

binary

sd-syslog

NO.29 Exhibit.

You need to have the JATP solution analyze jar, xls, and doc files
Referring to the exhibit, which two file types must be selected to accomplish this task? (Choose two.)

Java

library

document

executable

NO.30 Click the Exhibit button.

Which two statements are true about the configuration shown in the exhibit? (Choose two.)

The session is removed from the session table after 10 seconds of inactivity.

The session is removed from the session table after 10 milliseconds of inactivity.

Aggressive aging is triggered if the session table reaches 95% capacity.

Aggressive aging is triggered if the session table reaches 80% capacity.

NO.31 Exhibit.

Referring to the SRX Series flow module diagram shown in the exhibit. where is IDP/IPS processed’

Forwarding Lookup

Services ALGs

Screens

Security Policy

NO.32 Which two solutions provide a sandboxing feature for finding zero-day malware threats? (Choose two.)

Sky ATP

UTM

JATP

IPS

NO.33 You want to ensure that any certificates used in your IPsec implementation do not expire while in use by your SRX Series devices.
In this scenario, what must be enabled on your devices?

RSA

TLS

SCEP

CRL

NO.34 Which two statements are correct about server-protection SSL proxy? (Choose two.)

The server-protection SSL proxy intercepts the server certificate.

The server-protection SSL proxy is also known as SSL reverse proxy.

The server-protection SSL proxy forwards the server certificate after modification

The server-protection SSL proxy acts as the server from the client’s perspective

NO.35 Which two statements describe JSA? (Choose two.)

Security Director must be used to view third-party events from JSA flow collectors

JSA supports events and flows from Junos devices, including third-party devices.

JSA events must be manually imported into Security Director using an SSH connection

JSA can be used as a log node with Security Director or as a standalone solution

NO.36 Which statement is true about JATP incidents?

Incidents have an associated threat number assigned to them.

Incidents are sorted by category, followed by severity.

Incidents consist of all the events associated with a single threat.

Incidents are always automatically mitigated.

[Q13-Q36] Real JN0-334 dumps – Real Juniper dumps PDF in here [Sep-2022]

Be the first to reply

Leave a Reply Cancel reply