JN0-335 Questions Prepare with Learning Information! 2023 Regularly updated
Get JN0-335 Products Practice Material for JN0-335 Exam Question Preparation
NEW QUESTION 21
Click the Exhibit button.
Referring to the exhibit, which two values in the JIMS SRX client configuration must match the values configured on the SRX client? (Choose two.)
- A. Client Secret
- B. Client ID
- C. Token Lifetime
- D. IPv6 Reporting
Answer: A,B
NEW QUESTION 22
You must ensure that all encrypted traffic passing through your SRX device uses strong protocols and ciphers.
Which feature should you implement to satisfy this requirement?
- A. AppSecure
- B. JATP
- C. JIMS
- D. SSL proxy
Answer: D
NEW QUESTION 23
Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)
- A. JIMS replicates Active Directory authentication information to non-trusted Active Directory domain controllers.
- B. JIMS forwards Active Directory authentication information to SRX Series client devices.
- C. JIMS collects and maintains a database of authentication information from Active Directory domains.
- D. JIMS synchronizes Active Directory authentication information between a primary and secondary JIMS server.
Answer: C,D
NEW QUESTION 24
What information does JIMS collect from domain event log sources? (Choose two.)
- A. For device login events, JIMS collects the device IP address and machine name information.
- B. For user login events, JIMS collects the username and group membership information.
- C. For user login events, JIMS collects the login source IP address and username information.
- D. For device login events. JIMS collects the devide IP address and operating system version.
Answer: A,C
NEW QUESTION 25
You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution.
Which action would accomplish this task?
- A. Configure YARA rules.
- B. Configure a new anti-virus configuration rule.
- C. Configure the SAML settings.
- D. Configure whitelist rules
Answer: A
NEW QUESTION 26
Click the Exhibit button.
Referring to the exhibit, which statement is true?
- A. Malicious HTTP file downloads are always blocked.
- B. Hosts are unable to communicate through the SRX Series device after being placed on the infected host feed with a high enough threat score.
- C. Malicious HTTP file downloads are never blocked.
- D. Hosts are always able to communicate through the SRX Series device no matter the threat score assigned to them on the infected host feed.
Answer: B
NEW QUESTION 27
You must configure JSA to accept events from an unsupported third-party log source.
In this scenario, what should you do?
- A. Separate event collection and flow collection on separate collectors.
- B. Configure an RPM for a third-party device service module.
- C. Configure a universal device service module.
- D. Configure JSA to silently discard unsupported log types.
Answer: C
NEW QUESTION 28
You want to collect events and flows from third-party vendors.
Which solution should you deploy to accomplish this task?
- A. Contrail
- B. Log Director
- C. Policy Enforcer
- D. JSA
Answer: D
NEW QUESTION 29
Which two solutions provide a sandboxing feature for finding zero-day malware threats? (Choose two.)
- A. UTM
- B. IPS
- C. JATP
- D. Sky ATP
Answer: C,D
NEW QUESTION 30
Click the Exhibit button.
Referring to the exhibit, which two devices are considered to be part of the secure fabric site with Policy Enforcer? (Choose two.)
- A. Server-2
- B. QFX-1
- C. Server-1
- D. SRX-1
Answer: B,D
NEW QUESTION 31
Which feature is used when you want to permit traffic on an SRX Series device only at specific times?
- A. pass-through authentication
- B. ALGs
- C. scheduler
- D. counters
Answer: C
NEW QUESTION 32
Click the Exhibit button.
You examine the log file shown in the exhibit after running the set security idp active-policy command.
Which two statements are true in this scenario? (Choose two.)
- A. The IDP policy compiled successfully.
- B. The entire configuration was committed.
- C. The IDP hit cache is set to 16384.
- D. The IDP policy loaded successfully.
Answer: A,D
NEW QUESTION 33
Which two session parameters would be used to manage space on the session table? (Choose two.)
- A. high watermark
- B. low watermark
- C. TCP RST
- D. TCP MSS
Answer: A,B
NEW QUESTION 34
Which statement about the control link in a chassis cluster is correct?
- A. Recovering from a control link failure requires a reboot.
- B. The control messages sent over the link are encrypted by default.
- C. A cluster can have redundant control links.
- D. The control link heartbeats contain the configuration file of the nodes.
Answer: C
NEW QUESTION 35
What are two examples of RTOs? (Choose two.)
- A. session table entries
- B. IPsec SA entries
- C. fabric link probes
- D. control link heartbeats
Answer: A,B
NEW QUESTION 36
......
Most Reliable Juniper JN0-335 Training Materials: https://www.testsimulate.com/JN0-335-study-materials.html