Security, Specialist (JNCIS-SEC) (JN0-336) Free Practice Test

Question 1

You are asked to set up SSL proxy in SRX Series devices. An SSL proxy profile is already defined for you.
Which two steps are required to complete the setup? (Choose two.)

A. Reference the SSL proxy profile in a security policy.

B. Enable any Layer 7 services in the security policy in which SSL proxy is referenced.

C. Enable host-inbound-traffic HTTPS in the security zone in which SSL proxy is referenced.

D. Reference the SSL proxy profile in a security zone.

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which three algorithms are used to encrypt IP packets? (Choose three.)

A. Triple Data Encryption Standard (3DES)

B. Data Encryption Standard (DES)

C. Secure Hash Algorithm (SHA) - 1

D. Message Digest 5 (MD5)

E. Advanced Encryption Standard (AES)

Correct Answer: A,B,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

In Juniper high availability (HA) SRX Series device implementations, which interface will be used to exchange session state, configuration files, and ensure session continuity across nodes using the proprietary Trivial Network Protocol?

A. swfab

B. fab

C. fxp1

D. fxp0

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

How does Juniper's identity-aware firewall facilitate compliance with security policies and regulations?

A. by granting access based on user roles or identities

B. by enforcing the need for user confidentiality

C. by simplifying the design of the network architecture

D. by increasing network capacity to accommodate user requirements

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Using Junos Space Security Director, you want to configure a unique firewall policy for a specific SRX Series device.
Which firewall policy rules would satisfy the requirement?

A. all devices policy postrules

B. device policy rules

C. all devices policy prerules

D. group policy prerules

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

You have configured a new site-to-site VPN tunnel. The exhibit shows the security IPsec statistics output for the specific tunnel index from one of the tunnel-end devices.

Which two statements are correct in this scenario? (Choose two.)

A. No traffic passes through this tunnel.

B. The far-end tunnel device is rebooting.

C. AH is incorrectly configured.

D. The ESP configuration is not set up correctly.

Correct Answer: A,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which rule base in an IDP policy is used to eliminate false positives?

A. monitor

B. IPS

C. signature

D. exempt

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Juniper Security, Specialist (JNCIS-SEC) (JN0-336) Free Practice Test