Security, Specialist (JNCIS-SEC) (JN0-335) Free Practice Test

Question 1

Which two statements are correct about the cSRX? (Choose two.)

A. The cSRX only supports Layer 2 "bump-in-the-wire" deployments.

B. The cSRX supports firewall, NAT, IPS, and UTM services.

C. The cSRX has three default zones: trust, untrust, and management.

D. The cSRX supports BGP, OSPF, and IS-IS routing services.

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

What is the default timeout period for a TCP session in the session table of a Junos security device?

A. 60 minutes

B. 15 minutes

C. 1 minute

D. 30 minutes

Correct Answer: D

Question 3

Which two statements are true about the vSRX? (Choose two.)

A. UNIX is the base OS.

B. It does not have VMXNET3 vNIC support.

C. It has VMXNET3 vNIC support.

D. Linux is the base OS.

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Which two statements are correct when considering IPS rule base evaluation? (Choose two.)

A. IPS applies the least severe action to traffic matching multiple rules.

B. IPS applies the most severe action to traffic matching multiple rules,

C. IPS evaluates rules sequentially

D. IPS evaluates rules concurrently.

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

You want to control when cluster failovers occur.
In this scenario, which two specific parameters would you configure on an SRX Series device?
(Choose two.)

A. heartbeat-interval

B. heartbeat-address

C. heartbeat-tos

D. heartbeat-threshold

Correct Answer: A,D

Question 6

Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer.

To complete this task, where should you configure the default gateway for the User-1 device?

A. the irb interface on QFX-2

B. the interface on SRX-1 that connects to QFX-2

C. the irb interface on QFX-1

D. the interface of QFX-1 that connects to User-1

Correct Answer: C

Question 7

What is the default session timeout value for ICMP and UDP traffic?

A. 60 seconds

B. 5 minutes

C. 30 seconds

D. 30 minutes

Correct Answer: A

Question 8

Regarding static attack object groups, which two statements are true? (Choose two.)

A. Group membership automatically changes when Juniper updates the IPS signature database.

B. Group membership does not automatically change when Juniper updates the IPS signature database.

C. You must manually add matching attack objects to a custom group.

D. Matching attack objects are automatically added to a custom group.

Correct Answer: B,C

Question 9

You are configuring an SRX chassis cluster with the node-specific hostname and management address.

Referring to the exhibit, which configuration completes this requirement?

A.

B.

C.

D.

Correct Answer: D

Question 10

Referring to the exhibit, which statement is true?

A. IDP blocks all users.

B. IDP blocks root users.

C. IDP ignores the connection on matched sessions.

D. IDP closes the connection on matched sessions.

Correct Answer: C

Question 11

After performing a software upgrade on an SRX5800 chassis cluster, you notice that node1 is in the primary state and node0 is in the backup state. Your network standards dictate that node0 should be in the primary state.
In this scenario, which command should be used to comply with the network standards?

A. request chassis cluster failover redundancy-group 0 node 1

B. request chassis cluster failover redundancy-group 254 mode 0

C. request chassis cluster failover redundancy-group 0 node 0

D. request chassis cluster failover redundancy-group 254 node 1

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

What is the default timeout for a TCP session on an SRX Series device?

A. 1 hour

B. 30 seconds

C. 1 minute

D. 30 minutes

Correct Answer: D

Welcome to TestSimulate

Juniper Security, Specialist (JNCIS-SEC) (JN0-335) Free Practice Test