[Jul 26, 2025] Pass Juniper JN0-335 Exam Info and Free Practice Test [Q66-Q84]

NEW QUESTION 66
Click the Exhibit button.

Which two statements are true about the session shown in the exhibit? (Choose two.)

Two security policies are required for bidirectional traffic flow.

The ALG was enabled by manual configuration.

The ALG was enabled by default.

One security policy is required for bidirectional traffic flow.

NEW QUESTION 67
Which two statements about JIMS high availability are true? (Choose two.)

JIMS supports high availability through the installation of the primary and secondary JIMS servers.

SRX clients are configured with the shared virtual IP (VIP) address of the JIMS server.

SRX clients are configured with the unique IP addresses of the primary and secondary JIMS servers.

SRX clients synchronize authentication tables with both the primary and secondary JIMS servers.

NEW QUESTION 68
Which two statements describe IPS? (Choose two.)

IPS can be used to prevent future attacks from occurring.

IPS dynamically sends policy changes to SRX Series devices.

IPS inspects up to Layer 4 in the OSI model.

IPS inspects up to Layer 7 in the OSI model.

NEW QUESTION 69
Which two statements are correct about chassis clustering? (Choose two.)

The node ID value ranges from 1 to 255.

The node ID is used to identify each device in the chassis cluster.

A system reboot is required to activate changes to the cluster.

The cluster ID is used to identify each device in the chassis cluster.

NEW QUESTION 70
Which two statements are true about the vSRX? (Choose two.)

It does not have VMXNET3 vNIC support.

It has VMXNET3 vNIC support.

UNIX is the base OS.

Linux is the base OS.

NEW QUESTION 71
Which two sources are used by Juniper Identity Management Service (JIMS) for collecting username and device IP addresses? (Choose two.)

Active Directory domain controller event logs

OpenLDAP service ports

DNS

Microsoft Exchange Server event logs

NEW QUESTION 72
Which two statements describe application-layer gateways (ALGs)? (Choose two.)

ALGs are designed for specific protocols that require multiple sessions.

ALGs are used with protocols that use multiple ports.

ALGs can only be configured using Security Director.

ALGs are designed for specific protocols that use a single TCP session.

NEW QUESTION 73
What information does encrypted traffic insights (ETI) use to notify SRX Series devices about known malware sites?

certificates

dynamic address groups

MAC addresses

domain names

NEW QUESTION 74
What are two benefits of using a vSRX in a software-defined network? (Choose two.)

scalability

no required software license

granular security

infinite number of interfaces

NEW QUESTION 75
Which two statements are true about the vSRX? (Choose two.)

It does not have VMXNET3 vNIC support.

It has VMXNET3 vNIC support.

UNIX is the base OS.

Linux is the base OS.

NEW QUESTION 76
What are two types of attack objects used by IPS on SRX Series devices? (Choose two.)

protocol anomaly-based attacks

spam-based attacks

signature-based attacks

DDoS-based attacks

NEW QUESTION 77
You are asked to ensure that if the session table on your SRX Series device gets close to exhausting its resources, that you enforce a more aggress.ve age-out of existing flows. In this scenario, which two statements are correct? (Choose two.)

The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the low-watermark value is met.

The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the high-watermark value is met.

The high-watermark configuration specifies the percentage of how much of the session table is left before disabling a more aggressive age- out timer.

The high-watermark configuration specifies the percentage of how much of the session table can be allocated before applying a more aggressive age-out timer

NEW QUESTION 78
Click the Exhibit button. You are asked to create a security policy that will automatically add infected hosts to the infected hosts feed and block further communication through the SRX Series device.
What needs to be added to this configuration to complete this task?

Add a security intelligence policy to the permit portion of the security policy.

Add an action to the permit portion of the security policy.

Add logging to the permit portion of the security policy.

Add a match rule to the security policy with an appropriate threat level.

NEW QUESTION 79
Referring to the exhibit, which two statements describe the type of proxy used? (Choose two.)

forward proxy

client protection proxy

server protection proxy

reverse proxy

NEW QUESTION 80
Which two statements are true about mixing traditional and unified security policies? (Choose two.)

When a packet matches a unified security policy, the evaluation process terminates

Traditional security policies must come before unified security policies

Unified security policies must come before traditional security policies

When a packet matches a traditional security policy, the evaluation process terminates

NEW QUESTION 81
Referring to the exhibit, which statement is true?

IDP blocks root users.

IDP closes the connection on matched sessions.

IDP ignores the connection on matched sessions.

IDP blocks all users.

NEW QUESTION 82
You are asked to determine how much traffic a popular gaming application is generating on your network.
Which action will you perform to accomplish this task?

Enable AppQoS on the proper security zones

Enable APBR on the proper security zones

Enable screen options on the proper security zones

Enable AppTrack on the proper security zones.

NEW QUESTION 83
Which two statements are true about Juniper ATP Cloud? (Choose two.)

Juniper ATP Cloud only uses one antivirus software package to analyze files.

Juniper ATP Cloud uses multiple antivirus software packages to analyze files.

Juniper ATP Cloud uses antivirus software packages to protect against zero-day threats.

Juniper ATP Cloud does not use antivirus software packages to protect against zero-day threats.

NEW QUESTION 84
Click the Exhibit button.

Referring to the configuration shown in the exhibit, which two statements are true? (Choose two.)

The log is being stored on the local Routing Engine.

The log is being sent to a remote server.

The syslog is configured for a user facility.

The syslog is configured for an info facility.

[Jul 26, 2025] Pass Juniper JN0-335 Exam Info and Free Practice Test [Q66-Q84]

Be the first to reply

Leave a Reply Cancel reply