Security, Specialist (JNCIS-SEC) (JN0-334) Free Practice Test

Question 1

Which default protocol and port are used for JIMS to SRX client communication?

A. ADSI over TCP; port 389

B. HTTPS over TCP: port 443

C. RPC over TCP, port 135

D. WMI over TCP; port 389

Correct Answer: B

Question 2

Your network uses a remote e-mail server that is used to send and receive e-mails for your users.
In this scenario, what should you do to protect users from receiving malicious files thorugh e-mail?

A. Deploy Sky ATP POP3 e-mail protection

B. Deploy Sky ATP MAPI e-mail protection

C. Deploy Sky ATP SMTP e-mail protection

D. Deploy Sky ATP IMAP e-mail protection

Correct Answer: C

Question 3

What are two elements of a custom IDP/IPS attack object? (Choose two.)

A. the destination zone

B. the attack signature

C. the severity of the attack

D. the exempt rulebase

Correct Answer: B,C

Question 4

You want to support reth LAG interfaces on a chassis cluster.
What must be enabled on the interconnecting switch to accomplish this task?

A. RSTP

B. swfab

C. 802.3ad

D. LLDP

Correct Answer: C

Question 5

What is the default timeout period for a TCP session in the session table of a Junos security device?

A. 60 minutes

B. 15 minutes

C. 1 minute

D. 30 minutes

Correct Answer: D

Question 6

What are two examples of RTOs? (Choose two.)

A. IPsec SA entries

B. session table entries

C. control link heartbeats

D. fabric link probes

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which two solutions provide a sandboxing feature for finding zero-day malware threats? (Choose two.)

A. JATP

B. Sky ATP

C. IPS

D. UTM

Correct Answer: A,B

Question 8

What is the correct step sequence used when Sky ATP analyzes a file?

A. cache lookup -> static analysis -> antivirus scanning -> dynamic analysis

B. cache lookup -> antivirus scanning -> static analysis -> dynamic analysis

C. dynamic analysis -> static analysis -> antivirus scanning -> cache lookup

D. static analysis -> cache lookup -> antivirus scanning -> dynamic analysis

Correct Answer: B

Question 9

Click the Exhibit button.

Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer.
To complete this task, where should you configure the default gateway for the User-1 device?

A. the irb interface on QFX-2

B. the irb interface on QFX-1

C. the interface of QFX-1 that connects to User-1

D. the interface on SRX-1 that connects to QFX-2
https://www.juniper.net/documentation/en_US/release-independent/nce/topics/example/nce-162-sdsn-example.html

Correct Answer: A

Question 10

A routing change occurs on an SRX Series device that involves choosing a new egress interface.
In this scenario, which statement is true for all affected current sessions?

A. The current sessions do not change.

B. The current session are torn dowm only if the policy-rematch option has been enabled.

C. The current sessions might change based on the corresponding security policy.

D. The current sessions are torn down and go through first path processing based on the new route.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Juniper Security, Specialist (JNCIS-SEC) (JN0-334) Free Practice Test