JN0-334 시험 - Juniper실제시험문제와 답 - 75문항

Question No : 1

Which two solutions provide a sandboxing feature for finding zero-day malware threats? (Choose two.)

A.Sky ATP
B.UTM
C.JATP
D.IPS

정답:

Question No : 2

Which solution should you use if you want to detect known attacks using signature-based methods?

A.SSL proxy
B.JIMS
C.IPS
D.ALGs

정답:

Question No : 3

Which statement about the control link in a chassis cluster is correct?

A.A cluster can have redundant control links.
B.Recovering from a control link failure requires a reboot.
C.The control link heartbeats contain the configuration file of the nodes.
D.The control messages sent over the link are encrypted by default.

정답:
Explanation:
Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-chassis-cluster-dual-control-links.html

Question No : 4

Which two statements describe JSA? (Choose two.)

A.Security Director must be used to view third-party events rom JSA flow collectors.
B.JSA supports events and flows from Junos devices, including third-party devices.
C.JSA events must be manually imported into Security Directory using an SSH connection.
D.JSA can be used as a log node with Security Director or as a standalone solution.

정답:

Question No : 5

You are configuring a client-protection SSL proxy profile.
Which statement is correct in this scenario?

A.A server certificate is not used but a root certificate authority is used.
B.A server certificate and root certificate authority are not used.
C.A server certificate is used but a root certificate authority is not used.
D.A server certificate and a root certificate authority are both used.

정답:

Question No : 6

You must ensure that all encrypted traffic passing through your SRX device uses strong protocols and ciphers.
Which feature should you implement to satisfy this requirement?

A.SSL proxy
B.AppSecure
C.JIMS
D.JATP

정답:

Question No : 7

Which default protocol and port are used for JIMS to SRX client communication?

A.WMI over TCP; port 389
B.ADSI over TCP; port 389
C.HTTPS over TCP: port 443
D.RPC over TCP, port 135

정답:
Explanation:
Reference: https://www.juniper.net/documentation/en_US/jims/topics/task/configuration/jims-certificate-configuring.html#:~:text=By%20default%2C%20the%20HTTPS%20port%20is%20443.&text=The%20JIMS%20server%20communicates%20with,Firewall%20to%20allow%20this%20communication

Question No : 8

Which statement is true about high availability (HA) chassis clusters for the SRX Series device?

A.Cluster nodes require an upgrade to HA compliant Routing Engines.
B.Cluster nodes must be connected through a Layer 2 switch.
C.There can be active/passive or active/active clusters.
D.HA clusters must use NAT to prevent overlapping subnets between the nodes.

정답:

Question No : 9

How many nodes are configurable in a chassis cluster using SRX Series devices?

A.2
B.4
C.6
D.8

정답:

Question No : 10

Which two statements describe SSL proxy on SRX Series devices? (Choose two.)

A.SSL proxy supports TLS version 1.2.
B.Client-protection is also known as reverse proxy.
C.SSL proxy is supported when enabled within logical systems.
D.SSL proxy relies on Active Directory to provide secure communication.

정답:
Explanation:
Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-user-auth-ssl-tls.html

Question No : 11

Click the Exhibit button.

You are configuring an SRX chassis cluster with the node-specific hostname and management address. Referring to the exhibit, which configuration completes this requirement?
A)

B)

C)

D)

A.Option A
B.Option B
C.Option C
D.Option D

정답:
Explanation:
https://kb.juniper.net/InfoCenter/index?page=content&id=KB31080

Question No : 12

Click the Exhibit button.

Which two statements are true about the configuration shown in the exhibit? (Choose two.)

A.The session is removed from the session table after 10 seconds of inactivity.
B.The session is removed from the session table after 10 milliseconds of inactivity.
C.Aggressive aging is triggered if the session table reaches 95% capacity.
D.Aggressive aging is triggered if the session table reaches 80% capacity.

정답:

Question No : 13

You must fine tune an IPS security policy to eliminate false positives. You want to create exemptions to the normal traffic examination for specific traffic.
Which two parameters are required to accomplish this task? (Choose two.)

A.source IP address
B.destination IP address
C.destination port
D.source port

정답:

Question No : 14

You are deploying the Junos application firewall feature in your network.
In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)

A.destination port
B.source port
C.destination IP address
D.source IP address

정답:

Question No : 15

Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)

A.JIMS synchronizes Active Directory authentication information between a primary and secondary JIMS server.
B.JIMS forwards Active Directory authentication information to SRX Series client devices.
C.JIMS collects and maintains a database of authentication information from Active Directory domains.
D.JIMS replicates Active Directory authentication information to non-trusted Active Directory domain controllers.

정답:
Explanation:
https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/services-user-identification-identity-management-connection-primary.html

Juniper JN0-334 시험