[Jul-2024] Juniper JN0-335 Official Cert Guide PDF [Q44-Q62]

NEW QUESTION 44
Data plane logging operates in which two modes? (Choose two.)

syslog

binary

event

stream

NEW QUESTION 45
You are asked to track BitTorrent traffic on your network. You need to automatically add the workstations to the High_Risk_Workstations feed and the servers to the BitTorrent_Servers feed automatically to help mitigate future threats.

Which two commands would add this functionality to the FindThreat policy? (Choose two.)

NEW QUESTION 46
Which two statements are true about the fab interface in a chassis cluster? (Choose two.)

The fab link does not support fragmentation.

The physical interface for the fab link must be specified in the configuration.

The fab link supports traditional interface features.

The Junos OS supports only one fab link.

NEW QUESTION 47
Which two statements describe IPS? (Choose two.)

IPS can be used to prevent future attacks from occurring.

IPS dynamically sends policy changes to SRX Series devices.

IPS inspects up to Layer 4 in the OSI model.

IPS inspects up to Layer 7 in the OSI model.

NEW QUESTION 48
You are deploying a vSRX into a vSphere environment which applies the configuration from a bootable ISO file containing the juniper.conf file. After the vSRX boots and has the configuration applied, you make additional device specific configuration changes, commit, and reboot the device. Once the device finishes rebooting, you notice the specific changes you made are missing but the original configuration is applied.
In this scenario, what is the problem?

Configuration changes do not persist after reboots on vSRX.

The juniper.conf file was not applied to the vSRX.

The configuration file is corrupt.

The ISO file is still mounted on the vSRX.

NEW QUESTION 49
The AppQoE module of AppSecure provides which function?

The AppQoE module provides application-based routing.

The AppQoE module prioritizes important applications.

The AppQoE module provides routing, based on network conditions.

The AppQoE module blocks access to risky applications.

NEW QUESTION 50
When a security policy is deleted, which statement is correct about the default behavior of active sessions allowed by that policy?

The active sessions allowed by the policy will be dropped.

The active sessions allowed by the policy will be marked as a legacy flow and will continue to be forwarded.

The active sessions allowed by the policy will be reevaluated by the cached

The active sessions allowed by the policy will continue

NEW QUESTION 51
Click the Exhibit button.

The output shown in the exhibit is displayed in which format?

syslog

sd-syslog

binary

WELF

NEW QUESTION 52
Click the Exhibit button.

Referring to the SRX Series flow module diagram shown in the exhibit, where is IDP/IPS processed?

Forwarding Lookup

Services ALGs

Screens

Security Policy

NEW QUESTION 53
You administer a JSA host and want to include a rule that sets a threshold for excessive firewall denies and sends an SNMP trap after receiving related syslog messages from an SRX Series firewall.
Which JSA rule type satisfies this requirement?

common

offense

flow

event

NEW QUESTION 54
Exhibit

You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172 25.11.0/24 subnet to the Internet You create a policy named permit-http between the trust and untrust zones that permits HTTP traffic. When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.
Which two actions would correct the error? (Choose two.)

Issue the rollback 1 command from the top of the configuration hierarchy and attempt the commit again.

Execute the Junos commit full command to override the error and apply the configuration.

Create a custom application named http at the [edit applications] hierarchy.

Modify the security policy to use the built-in Junos-http applications.

NEW QUESTION 55
You must configure JSA to accept events from an unsupported third-party log source.
In this scenario, what should you do?

Separate event collection and flow collection on separate collectors.

Configure an RPM for a third-party device service module.

Configure JSA to silently discard unsupported log types.

Configure a universal device service module.

NEW QUESTION 56
Which solution enables you to create security policies that include user and group information?

JIMS

ATP Appliance

Network Director

NETCONF

NEW QUESTION 57
Which default protocol and port are used for JIMS to SRX client communication?

WMI over TCP; port 389

ADSI over TCP; port 389

HTTPS over TCP: port 443

RPC over TCP, port 135

NEW QUESTION 58
Which two statements are correct about SSL proxy server protection? (Choose two.)

You do not need to configure the servers to use the SSL proxy the function on the SRX Series device.

You must load the server certificates on the SRX Series device.

The servers must be configured to use the SSL proxy function on the SRX Series device.

You must import the root CA on the servers.

NEW QUESTION 59
Which statement about security policy schedulers is correct?

Multiple policies can use the same scheduler.

A policy can have multiple schedulers.

When the scheduler is disabled, the policy will still be available.

A policy without a defined scheduler will not become active

NEW QUESTION 60
Which two statements are true about Juniper ATP Cloud? (Choose two.)

Juniper ATP Cloud only uses one antivirus software package to analyze files.

Juniper ATP Cloud uses multiple antivirus software packages to analyze files.

Juniper ATP Cloud uses antivirus software packages to protect against zero-day threats.

Juniper ATP Cloud does not use antivirus software packages to protect against zero-day threats.

Explanation
Juniper ATP Cloud is a cloud-based threat detection service that protects all hosts in your network against evolving security threats. Juniper ATP Cloud performs the following tasks:
It extracts potentially malicious objects and files from the traffic and sends them to the cloud for analysis.
It uses multiple antivirus software packages to analyze files and identify known malicious files quickly.
It also uses other techniques, such as machine learning, sandboxing, and behavioral analysis, to identify new malware and add it to the known list of malware.
It correlates between newly identified malware and known command and control (C&C) sites to aid analysis.
It blocks known malicious file downloads and outbound C&C traffic.
It provides features such as DNS, Encrypted Traffic Insights (ETI) and IoT security if you have ATP Cloud premium license.
Based on this information, we can infer the following:
Option B is correct because Juniper ATP Cloud uses multiple antivirus software packages to analyze files, as well as other techniques, to provide robust coverage against sophisticated, evasive threats.
Option D is correct because Juniper ATP Cloud does not use antivirus software packages to protect against zero-day threats, which are unknown and undetected by traditional antivirus solutions. Instead, it uses other techniques, such as machine learning, sandboxing, and behavioral analysis, to identify and mitigate zero-day threats.
Option A is incorrect because Juniper ATP Cloud does not only use one antivirus software package to analyze files, but multiple ones, as well as other techniques.
Option C is incorrect because Juniper ATP Cloud does not use antivirus software packages to protect against zero-day threats, but other techniques.
References: Juniper Security, Specialist (JNCIS-SEC) Reference Materials and Juniper Security, Professional (JNCIP-SEC) Reference Materials
https://blogs.juniper.net/en-us/security/juniper-strengthens-connected-security-portfolio-with-new-risk-based-acc
https://blogs.juniper.net/en-us/security/juniper-strengthens-connected-security-portfolio-with-new-risk-based-acc

NEW QUESTION 61
What are two types of system logs that Junos generates? (Choose two.)

SQL log files

data plane logs

system core dump files

control plane logs

NEW QUESTION 62
What are three capabilities of AppQoS? (Choose three.)

re-write DSCP values

assign a forwarding class

re-write the TTL

rate-limit traffic

reserve bandwidth

[Jul-2024] Juniper JN0-335 Official Cert Guide PDF [Q44-Q62]

Leave a Reply Cancel reply

Related Posts

First Attempt Guaranteed Success in JN0-663 Exam 2023 [Q54-Q78]

[Q39-Q63] Ultimate Guide to Prepare JN0-213 with Accurate PDF Questions [Jun 13, 2024]

Pass Your Next JN0-251 Certification Exam Easily & Hassle Free [Q25-Q46]