2023 Juniper JN0-335 Exam Dumps Questions

Juniper certification is a highly valuable and sought-after certification for IT professionals seeking to enhance their knowledge and expertise. JN0-335 exam is specifically designed to validate the skills required to configure and maintain the JNCIS-SEC platform, which is widely used by businesses around the world. These JN0-335 exam dumps questions are specifically designed to help you prepare for the exam by testing your knowledge and providing you with valuable insights into the types of questions that you will encounter. Test free Juniper JN0-335 exam questions below.

Page 1 of 3

1. Click the Exhibit button.





Which two statements describe the output shown in the exhibit? (Choose two.)

Redundancy group 1 experienced an operational failure.

Redundancy group 1 was administratively failed over.

Node 0 is controlling traffic for redundancy group 1.

Node 1 is controlling traffic for redundancy group 1.

 Loading...

2. Which two statements are correct about chassis clustering? (Choose two.)

The node ID value ranges from 1 to 255.

The node ID is used to identify each device in the chassis cluster.

A system reboot is required to activate changes to the cluster.

The cluster ID is used to identify each device in the chassis cluster.

 Loading...

3. On which three Hypervisors is vSRX supported? (Choose three.)

VMware ESXi

Citrix Hypervisor

Hyper-V

KVM

Oracle VM

 Loading...

4. Which two statements are correct about a reth LAG? (Choose two.)

Links must have the same speed and duplex setting.

Links must use the same cable type

You must have a "minimum-links" statement value of two.

You should have two or more interfaces.

 Loading...

5. You are asked to ensure that if the session table on your SRX Series device gets close to exhausting its resources, that you enforce a more aggress.ve age-out of existing flows.

In this scenario, which two statements are correct? (Choose two.)

The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the low-watermark value is met.

The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the high-watermark value is met.

The high-watermark configuration specifies the percentage of how much of the session table is left before disabling a more aggressive age- out timer.

The high-watermark configuration specifies the percentage of how much of the session table can be allocated before applying a more aggressive age-out timer

 Loading...

6. Which two statements are correct when considering IPS rule base evaluation? (Choose two.)

IPS evaluates rules concurrently.

IPS applies the most severe action to traffic matching multiple rules,

IPS evaluates rules sequentially

IPS applies the least severe action to traffic matching multiple rules.

 Loading...

7. Exhibit





Referring to the exhibit, which two statements describe the type of proxy used? (Choose two.)

forward proxy

client protection proxy

server protection proxy

reverse proxy

 Loading...

8. You are implementing an SRX Series device at a branch office that has low bandwidth and also uses a cloud-based VoIP solution with an outbound policy that permits all traffic.

Which service would you implement at your edge device to prioritize VoIP traffic in this scenario?

AppFW

SIP ALG

AppQoE

AppQoS

 Loading...

9. Your manager asks you to provide firewall and NAT services in a private cloud.

Which two solutions will fulfill the minimum requirements for this deployment? (Choose two.)

a single vSRX

a vSRX for firewall services and a separate vSRX for NAT services

a cSRX for firewall services and a separate cSRX for NAT services

a single cSRX

 Loading...

10. Exhibit





Which two statements are correct about the configuration shown in the exhibit? (Choose two.)

The session-class parameter in only used when troubleshooting.

The others 300 parameter means unidentified traffic flows will be dropped in 300 milliseconds.

Every session that enters the SRX Series device will generate an event

Replacing the session-init parameter with session-lose will log unidentified flows.

 Loading...

Page 2 of 3

11. You want to manually failover the primary Routing Engine in an SRX Series high availability cluster pair.

Which step is necessary to accomplish this task?

Issue the set chassis cluster disable reboot command on the primary node.

Implement the control link recover/ solution before adjusting the priorities.

Manually request the failover and identify the secondary node

Adjust the priority in the configuration on the secondary node.

 Loading...

12. Which method does the loT Security feature use to identify traffic sourced from IoT devices?

The SRX Series device streams metadata from the loT device transit traffic to Juniper ATP Cloud Juniper ATP Cloud.

The SRX Series device streams transit traffic received from the IoT device to Juniper ATP Cloud.

The SRX Series device identifies loT devices using their MAC address.

The SRX Series device identifies loT devices from metadata extracted from their transit traffic.

 Loading...

13. You want to permit access to an application but block application sub.

Which two security policy features provide this capability? (Choose two.)

URL filtering

micro application detection

content filtering

APPID

 Loading...

14. Which two sources are used by Juniper Identity Management Service (JIMS) for collecting username and device IP addresses? (Choose two.)

Microsoft Exchange Server event logs

DNS

Active Directory domain controller event logs

OpenLDAP service ports

 Loading...

15. Which two statements are correct about JSA data collection? (Choose two.)

The Event Collector collects information using BGP FlowSpec.

The Flow Collector can use statistical sampling

The Flow Collector parses logs.

The Event Collector parses logs

 Loading...

16. Which two statements about SRX Series device chassis clusters are correct? (Choose two.)

The chassis cluster data plane is connected with revenue ports.

The chassis cluster can contain a maximum of three devices.

The chassis cluster data plane is connected with SPC ports.

The chassis cluster can contain a maximum of two devices.

 Loading...

17. You are asked to implement IPS on your SRX Series device.

In this scenario, which two tasks must be completed before a configuration will work? (Choose two.)

Download the IPS signature database.

Enroll the SRX Series device with Juniper ATP Cloud.

Install the IPS signature database.

Reboot the SRX Series device.

 Loading...

18. Which two statements are correct about the cSRX? (Choose two.)

The cSRX supports firewall, NAT, IPS, and UTM services.

The cSRX only supports Layer 2 "bump-in-the-wire" deployments.

The cSRX supports BGP, OSP

and IS-IS routing services.

The cSRX has three default zones: trust, untrust, and management

 Loading...

19. You are troubleshooting unexpected issues on your JIMS server due to out of order event log timestamps.

Which action should you take to solve this issue?

Enable time synchronization on the client devices.

Enable time synchronization on the JIMS server.

Enable time synchronization on the domain controllers.

Enable time synchronization on the SRX Series devices.

 Loading...

20. Exhibit





When trying to set up a server protection SSL proxy, you receive the error shown.

What are two reasons for this error? (Choose two.)

The SSL proxy certificate ID is part of a blocklist.

The SSL proxy certificate ID does not have the correct renegotiation option set.

The SSL proxy certificate ID is for a forwarding proxy.

The SSL proxy certificate ID does not exist.

 Loading...

Page 3 of 3

21. Which statement about security policy schedulers is correct?

Multiple policies can use the same scheduler.

A policy can have multiple schedulers.

When the scheduler is disabled, the policy will still be available.

A policy without a defined scheduler will not become active

 Loading...

22. You want to set up JSA to collect network traffic flows from network devices on your network.

Which two statements are correct when performing this task? (Choose two.)

BGP FlowSpec is used to collect traffic flows from Junos OS devices.

Statistical sampling increases processor utilization

Statistical sampling decreases event correlation accuracy.

Superflows reduce traffic licensing requirements.

 Loading...

23. Exhibit





Referring to the SRX Series flow module diagram shown in the exhibit, where is application security processed?

Forwarding Lookup

Services ALGs

Security Policy

Screens

 Loading...

24. When a security policy is modified, which statement is correct about the default behavior for active sessions allowed by that policy?

The active sessions allowed by the policy will be dropped.

Only policy changes that involve modification of the action field will cause the active sessions affected by the change to be dropped.

Only policy changes that involve modification of the application will cause the active sessions affected by the change to be dropped.

The active sessions allowed by the policy will continue unchanged.

 Loading...

25. Exhibit





You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172 25.11.0/24 subnet to the Internet You create a policy named permit-http between the trust and untrust zones that permits HTTP traffic. When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.

Which two actions would correct the error? (Choose two.)

Issue the rollback 1 command from the top of the configuration hierarchy and attempt the commit again.

Execute the Junos commit full command to override the error and apply the configuration.

Create a custom application named http at the [edit applications] hierarchy.

Modify the security policy to use the built-in Junos-http applications.

 Loading...

26. You are asked to create an IPS-exempt rule base to eliminate false positives from happening.

Which two configuration parameters are available to exclude traffic from being examined? (Choose two.)

source port

source IP address

destination IP address

destination port

 Loading...

27. Exhibit





Using the information from the exhibit, which statement is correct?

Redundancy group 1 is in an ineligible state.

Node1 is the active node for the control plane

There are no issues with the cluster.

Redundancy group 0 is in an ineligible state.

 Loading...

28. You want to control when cluster failovers occur.

In this scenario, which two specific parameters would you configure on an SRX Series device? (Choose two.)

hearcbeac-interval

heartbeac-address

hearcbeat-cos

hearcbeac-chreshold

 Loading...

29. You are asked to reduce the load that the JIMS server places on your

Which action should you take in this situation?

Connect JIMS to the RADIUS server

Connect JIMS to the domain Exchange server

Connect JIMS to the domain SQL server.

Connect JIMS to another SRX Series device.

 Loading...

30. You want to show tabular data for operational mode commands.

In this scenario, which logging parameter will provide this function?

permit

count

session-init

session-close

 Loading...

 Loading...