Junos Pulse Access Control, Specialist (JNCIS-AC) (JN0-314) Free Practice Test

Question 1

Which Junos Pulse feature allows the user to log in once through a Junos Pulse Secure Access Service on the network and then access resources protected by a Junos Pulse Access Control Service without reauthentication?

A. Location Awareness

B. Roaming Session

C. Session Migration

D. Persistent Session

Correct Answer: C

Question 2

When configuring the Junos Pulse Access Control Service to forward logs to Juniper Networks STRM, which filter format is required?

A. Generic:Generic

B. WELF:WELF

C. Standard:Standard

D. Syslog:Syslog

Correct Answer: B

Question 3

The user-role-based policies of your SRX Series device are integrated with the Junos Pulse Access Control Service.
What are two user attributes that would be used to assign a firewall policy? (Choose two.)

A. user session duration

B. user certificate subject alternative name

C. user LDAP group

D. user realm assignment

Correct Answer: B,C

Question 4

You are an administrator of a large campus network. Every switch on a floor within each building of your campus has been configured for a different VLAN. During implementation of the Junos Pulse Access Control Service, you must configure a RADIUS return attribute policy to apply a role representing a group of authenticated users that frequently transport their laptops from building to building and floor to floor.
In the admin GUI, which policy element would you enable to accommodate these users?

A. VLAN

B. Add Session-Timeout attribute with value equal to the session lifetime

C. Add Termination-Action attribute with value equal

D. Open port

Correct Answer: D

Question 5

To assign RADIUS attributes based on user roles, which two actions are acceptable? (Choose two.)

A. Map the user into only one role and assign both a dynamic VLAN and multiple other attributes for that role.

B. Map the user into multiple roles and assign multiple attributes based on the combined group of roles.

C. Map the user into only one role and return only one attribute for the user.

D. Map the user into multiple roles and return multiple attributes, one per role.

Correct Answer: A,C

Question 6

What are two ways to access the Junos Pulse Access Control Service? (Choose two.)

A. admin GUI

B. console

C. SSH

D. Telnet

Correct Answer: A,C

Question 7

Which statement is true about a VIP address in a Junos Pulse Access Control Service cluster?

A. A VIP is required when all endpoints connected to the cluster use the Junos Pulse client.

B. A VIP is required when all endpoints connected to the cluster use agentless access.

C. A VIP is required when all endpoints connected to the cluster use the Odyssey Access Client.

D. A VIP is required when connecting a firewall enforcer to the cluster.

Correct Answer: B

Question 8

Without calling JTAC, which two troubleshooting tools on a MAG Series device would you use to identify the cause of an authentication failure?

A. System Snapshot

B. Remote Debugging

C. Policy Tracing

D. User Access logs

Correct Answer: C,D

Question 9

What are three necessary steps for enabling 802.1X access when configuring Layer 2 enforcement? (Choose three.)

A. Configure a location group

B. Configure role and role-mapping rules

C. Configure RADIUS clients

D. Configure the RADIUS AV pair list

E. Create an authentication protocol set

Correct Answer: A,B,C

Question 10

Your company has deployed the Junos Pulse Access Control Service. The system administrator notices that the Host Checker policies are not being applied and enforced. You have verified that the controller's configuration is correct.
Which two conditions are causing this issue? (Choose two.)

A. The endpoint is using EAP-TTLS with EAP-JUAC as the inner protocol.

B. The endpoint is using EAP-PEAP with EAP-GTC as the inner protocol,

C. The endpoint is using EAP-FAST with EAP-GTC as the inner protocol,

D. The endpoint is using EAP-PEAP with EAP-JUAC as the inner protocol.

Correct Answer: B,C

Question 11

A customer wants to use the RADIUS proxy feature in the Junos Pulse Access Control Service with an existing RADIUS server that has a populated user file for EAP authentication.
Which two considerations must the customer take into account? (Choose two.)

A. RADIUS proxy needs Windows Domain Controller in the backend.

B. RADIUS proxy allows the use of roles and role restrictions.

C. RADIUS proxy allows you to skip the role assignment process.

D. Inner proxy configuration passes authentication data in cleartext to external RADIUS servers.

Correct Answer: C,D

Question 12

What is required to deploy an active/active cluster?

A. dedicated interfaces for state and configuration synchronization and management modules in at least one gateway

B. separate VIP configurations for the external interface facing incoming traffic and the VIP for synchronization

C. each node must have a dedicated default route through the gateway that connects to all other Junos Pulse Gateways

D. an external load balancer or DNS mechanism to distribute the traffic to each cluster member

Correct Answer: D

Question 13

You are configuring a Junos Pulse client connection set on the Junos Pulse Access Control Service. You need the Junos Pulse client to automatically add new connections when new supported access gateways are encountered through the Web browser.
Which UI setting would you use to enable this automation?

A. URL

B. Dynamic connections

C. Location awareness

D. Allow user connections

Correct Answer: B

Question 14

-- Exhibit - -- Exhibit -

Click the Exhibit button.
You have created a new sign-in policy and informed users that they must now sign in to the URL https://agentless.mycompany.com to access their secure files. Users are reporting, however, that they are unable to sign in from that URL.
Referring to the exhibit, what is causing this issue?

A. The authentication realm is not properly configured.

B. Role-mapping rules have not yet been defined.

C. The sign-in URLs are not in the correct order.

D. The sign-in URL does not support local authentication.

Correct Answer: C

Question 15

You are deploying the Junos Pulse client to a new user who does not have Junos Pulse installed. You configure the Junos Pulse component set to use Minimal components. The user is unable to connect to any Junos Pulse Access Control Service devices.
What is causing the problem?

A. The user is unable to add any connections and the connection set is empty.

B. The Junos Pulse client must be configured locally with the Minimal components option.

C. The connection the user is attempting to add must be configured with the All components option.

D. Junos Pulse Location Awareness is preventing the user from adding connections.

Correct Answer: A

Welcome to TestSimulate

Juniper Junos Pulse Access Control, Specialist (JNCIS-AC) (JN0-314) Free Practice Test