JN0-335 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
which method does the lot Security feature use to identify traffic sourced from loT devices?

A.The SRX Series device identifies loT devices from metadata extracted from their transit traffic.
B.The SRX Series device streams transit traffic received from the loT device to Juniper ATP Cloud
C.The SRX Series device identifies loT devices using their MAC addresses.
D.The SRX Series device streams metadata from the toT device transit traffic to Juniper ATP Cloud

正解:

Question No : 2
How does Juniper ATP Cloud protect a network from zero-day threats?

A.lt uses known virus signatures:
B.It uses a cache lookup:
C.lt uses dynamic analysis
D.It uses antivirus software

正解:

Question No : 3
While working on an SRX firewall, you execute the show security policies policy-name <name> detail command
Which function does this command accomplish?

A.It shows the system log files for the local SRX Series device
B.lt identifies the different custom policies enabled.
C.It shows policy counters for a configured policy
D.It displays details about the default security policy

正解:

Question No : 4
Click the Exhibit button

Referring to the exhibit, which two statements describe the type of proxy used? (Choose two.)

A.forward proxy
B.server protection proxy
C.reverse proxy
D.client protection Proxy

正解:

Question No : 5
Which two types of SSL proxy are available on SRX Series devices? (Choose two.)

A.DNS proxy
B.client-protection
C.server-protection
D.Web Proxy

正解:

Question No : 6
Which two statements are correct about the Junos IPS feature? (Choose two)

A.IPS uses sandboxing to detect unknown attacks,
B.IPS is integrated as a security service on SRX Series devices.
C.DIPS uses protocol anomaly rules to detect unknown attacks
D.DIPS is a standalone platform running on dedicated hardware or as a virtual device.

正解:

Question No : 7
Click the Exhibit button.

You just finished setting up your command-and-control (C&C) category with Juniper ATP Cloud. You notice that all of the them.
Which statement is correct in this scenario?

A.Set the maximum C&C entries within the Juniper ATP Cloud GUİ.
B.No action is required, the feeds take a few minutes to download
C.Use the commit full command to start the download
D.The security intelligence policy must be configured on a unified security policy.

正解:

Question No : 8
Click the Exhibit button.

When trying to set up a server protection SSL proxy, you receive the error shown in the exhibit
What are two reasons for this error? (Choose two)

A.The SSL proxy certificate ID is for a forwarding proxy
B.The SSL proxy certificate ID is part of a blocklist.
C.The SSL proxy certificate ID does not exist.
D.The SSL proxy certificate ID does not have the correct renegotiation option set

正解:

Question No : 9
Which two statements are correct when considering IPS rule base evaluation? (Choose two)

A.IPS evaluates rules sequentially.
B.DIPS applies the least severe action to traffic matching multiple rules.
C.IPS applies the most severe action to traffic matching multiple rules
D.HPS evaluates rules concurrently

正解:

Question No : 10
You are asked to block malicious applications regardless of the port number being used
In this scenario, which two application security features should be used? (Choose two)

A.AppTrack
B.AppFW
C.AppQoE
D.APPID

正解:

Question No : 11
Which solution enables you to create security policies that include user and group information?

A.NETCONF
B.JIMS
C.ATP Appliance
D.Network Director

正解:

Question No : 12
Click the Exhibit button.

Using the information from the exhibit, which statement is correct?

A.Redundancy group 1 is in an ineligible state.
B.Node 1 is the active node for the control plane
C.Redundancy group 0 is in an ineligible state.
D.There are no issues with the cluster

正解:

Question No : 13
What are two types of system logs that Junos generates? (Choose two.)

A.system core dump files
B.control plane-logs
C.data plane logs
D.SQL log files

正解:

Question No : 14
Which two statements are true about the fab interface in a chassis cluster? (Choose two.)

A.The Junos OS supports only one fab link.
B.The fab link does not support fragmentation
C.The fab link supports traditional interface features
D.The physical interface for the fab link must be specified in the configuration.

正解:

Question No : 15
On an SRX Series firewall, what are two ways that Encrypted Traffic Tosights assess the threat of the traffic? (Choose two)

A.it decrypts the data to validate the nash
B.,it reviews the timing and frequency of the connections.
C.It validates the certificates used.
D.It decrypts the file in a sandbox.

正解:

Juniper JN0-335 問題練習