최신 JN0-335 무료덤프 - Juniper Security, Specialist (JNCIS-SEC)

문제1

Which two statements are true about mixing traditional and unified security policies? (Choose two.)

A. When a packet matches a traditional security policy, the evaluation process terminates

B. Unified security policies must come before traditional security policies

C. Traditional security policies must come before unified security policies

D. When a packet matches a unified security policy, the evaluation process terminates

정답: A,C

문제2

When referencing a SSL proxy profile in a security policy, which two statements are correct?
(Choose two.)

A. A security policy can only reference a client-protection SSL proxy profile or a server-protection SSL proxy profile.

B. If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is not decrypted.

C. A security policy can reference both a client-protection SSL proxy profile and a server- protection proxy profile.

D. If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is decrypted.

정답: C,D

문제3

Which two settings must be enabled on the hypervisor in a vSRX deployment to ensure proper chassis cluster operation? (Choose two.)

A. Fabric links must have an MTU of 9000.

B. Control links must operate in promiscuous mode.

C. Fabric links must operate in promiscuous mode.

D. Control links must have an MTU of 9000.

정답: A,B

문제4

Which feature is used when you want to permit traffic on an SRX Series device only at specific times?

A. counters

B. pass-through authentication

C. scheduler

D. ALGs

정답: C

문제5

Click the Exhibit button. You are validating the configuration template for device access.
The commands in the exhibit have been entered to secure IP access to an SRX Series device.
Referring to the exhibit, which two statements are true? (Choose two.)

A. The loopback interface blocks invalid traffic on its entry into the device.

B. The loopback interface blocks invalid traffic on its exit from the device.

C. The device manager can access the device from 192.168.11.248.

D. The device manager can access the device from 10.253.1.2.

정답: A,D

문제6

You have implemented a vSRX in your VMware environment. You want to implement a second vSRX Series device and enable chassis clustering.
Which two statements are correct in this scenario about the control-link settings? (Choose two.)

A. In the vSwitch properties settings, set the VLAN ID to None.

B. In the vSwitch security settings, reject MAC address changes.

C. In the vSwitch security settings, accept promiscuous mode.

D. In the vSwitch security settings, reject forged transmits.

정답: A,C

문제7

You are asked to convert two standalone SRX Series devices to a chassis cluster deployment.
You must ensure that your IPsec tunnels will be compatibla with the new deployment.
In this scenario, which two interfaces should be used when binding your tunnel endpoints?
(Choose two.)

A. ge

B. lo0

C. pp0

D. reth

정답: A,D

문제8

You need to implement Junos Screen options to protect traffic coming through the ge-0/0/0 and ge-0/0/1 interfaces which are located in the trust and DMZ zones, respectively. Where would you enable the Junos Screen options?

A. in the global security zone settings

B. in the trust and DMZ zone settings

C. on the ge-0/0/0 and ge-0/0/1 interfaces

D. in a security policy

정답: B

문제9

Which two statements about SRX chassis clustering are correct? (Choose two.)

A. SRX chassis clustering supports active/passive and active/active for the data plane.

B. SRX chassis clustering only supports active/passive for the data plane.

C. SRX chassis clustering supports active/passive for the control plane.

D. SRX chassis clustering supports active/active for the control plane.

정답: A,C

설명: (DumpTOP 회원만 볼 수 있음)

문제10

When trying to set up a server protection SSL proxy, you receive the error shown. What are two reasons for this error? (Choose two.)

A. The SSL proxy certificate ID is part of a blocklist.

B. The SSL proxy certificate ID is for a forwarding proxy.

C. The SSL proxy certificate ID does not have the correct renegotiation option set.

D. The SSL proxy certificate ID does not exist.

정답: B,D

최신 JN0-335 무료덤프 - Juniper Security, Specialist (JNCIS-SEC)

우리와 연락하기

유용한 링크

최신 업데이트