Juniper Security, Specialist (JNCIS-SEC) - JN0-334 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which two statements about JIMS high availability are true? (Choose two.)

A. SRX clients are configured with the shared virtual IP (VIP) address of the JIMS server. B. JIMS supports high availability through the installation of the primary and secondary JIMS servers. C. SRX clients synchronize authentication tables with both the primary and secondary JIMS servers. D. SRX clients are configured with the unique IP addresses of the primary and secondary JIMS servers.

Discussion 0

Correct Answer: B,D Vote an answer

Question 2

Click the Exhibit button.

You have configured the scheduler shown in the exhibit to prevent users from accessing certain websites from 1:00 PM to 3:00 PM Monday through Friday. This policy will remain in place until further notice. When testing the policy, you determine that the websites are still accessible during the restricted times.
In this scenario, which two actions should you perform to solve the problem? (Choose two.)

A. Use the PM parameter when specifying the time in the schedule. B. Use the start-date parameter to specify the date for each Monday and use the stop-date parameter to specify the date for each Friday. C. Use the 13:00 parameter and the 15:00 parameter when specifying the time. D. Add the saturday exclude parameter and the sunday exclude parameter to ensure weekends are excluded from the schedule.

Discussion 0

Correct Answer: C,D Vote an answer

Question 3

Which two statements describe JSA? (Choose two.)

A. JSA events must be manually imported into Security Directory using an SSH connection. B. JSA can be used as a log node with Security Director or as a standalone solution. C. Security Director must be used to view third-party events rom JSA flow collectors. D. JSA supports events and flows from Junos devices, including third-party devices.

Discussion 0

Correct Answer: B,D Vote an answer

Question 4

Which security log message format reduces the consumption of CPU and storage?

A. WELF B. BSD syslog C. structured syslog
https://www.juniper.net/documentation/en_US/junos/topics/concept/security-binary-logging-understanding.html Security log messages can also be maintained in text-based formats. Because security logging can produce large amounts of data, however, text-based log files can quickly consume storage and CPU resources. Depending on your implementation of security logging, a log file in a binary-based format can provide more efficient use of on-box or off-box storage and improved CPU utilization. Binary format for security log messages is available on all SRX Series devices. D. binary

Discussion 0

Correct Answer: D Vote an answer

Question 5

Click the Exhibit button.

Referring to the configuration shown in the exhibit, which two statements are true? (Choose two.)

A. The syslog is configured for an info facility. B. The syslog is configured for a user facility. C. The log is being stored on the local Routing Engine. D. The log is being sent to a remote server.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

You want to use Sky ATP to protect your network; however, company policy does not allow you to send any files to the cloud.
Which Sky ATP feature should you use in this situation?

A. Only use cloud-based Sky ATP file hash lookups. B. Only use on-box SRX anti-malware file scanning. C. Only use cloud-based Sky ATP file blacklists. D. Only use on-premises local Sky ATP server anti-malware file scanning.

Discussion 0

Correct Answer: A Vote an answer

Question 7

Which two statements describe IPS? (Choose two.)

A. IPS inspects up to Layer 4 in the OSI model. B. IPS inspects up to Layer 7 in the OSI model. C. IPS dynamically sends policy changes to SRX Series devices. D. IPS can be used to prevent future attacks from occurring.

Discussion 0

Correct Answer: B,D Vote an answer

Question 8

What is the default session timeout value for ICMP and UDP traffic?

A. 30 minutes B. 60 seconds C. 30 seconds D. 5 minutes

Discussion 0

Correct Answer: B Vote an answer

Question 9

When considering managed sessions, which configuration parameter determines how full the session table must be to implement the early age-out function? (Choose two)

A. low watermark B. high waremark C. session service timeout D. policy rematch

Discussion 0

Correct Answer: B,C Vote an answer

Question 10

Click the Exhibit button.

You need to have the JATP solution analyzer .jar, .xls, and .doc files.
Referring to the exhibit, which two file types must be selected to accomplish this task? (Choose two.)

A. Java B. document C. library D. executable
https://www.juniper.net/documentation/en_US/release-independent/sky-atp/topics/reference/general/sky-atp-profile-overview.html

Discussion 0

Correct Answer: A,B Vote an answer