(2023) PASS JN0-335 exam with Juniper JN0-335 Real Exam Questions [Q48-Q63] : Valid Premium Exam : http://premium.validexam.com

NO.48 Click the Exhibit button.

Referring to the SRX Series flow module diagram shown in the exhibit, where is IDP/IPS processed?

Forwarding Lookup

Services ALGs

Screens

Security Policy

NO.49 Click the Exhibit button.

You have configured your SRX Series device to receive authentication information from a JIMS server. However, the SRX is not receiving any authentication information.
Referring to the exhibit, how would you solve the problem?

Use the JIMS Administrator user interface to add the SRX device as client.

Generate an access token on the SRX device that matches the access token on the JIMS server.

Update the IP address of the JIMS server

Change the SRX configuration to connect to the JIMS server using HTTP.

NO.50 Exhibit

You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172 25.11.0/24 subnet to the Internet You create a policy named permit-http between the trust and untrust zones that permits HTTP traffic. When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.
Which two actions would correct the error? (Choose two.)

Issue the rollback 1 command from the top of the configuration hierarchy and attempt the commit again.

Execute the Junos commit full command to override the error and apply the configuration.

Create a custom application named http at the [edit applications] hierarchy.

Modify the security policy to use the built-in Junos-http applications.

NO.51 Which two statements about SRX Series device chassis clusters are true? (Choose two.)

Redundancy group 0 is only active on the cluster backup node.

Each chassis cluster member requires a unique cluster ID value.

Each chassis cluster member device can host active redundancy groups

Chassis cluster member devices must be the same model.

NO.52 You are asked to block malicious applications regardless of the port number being used. In this scenario, which two application security features should be used? (Choose two.)

AppFW

AppQoE

APPID

AppTrack

NO.53 What is the default timeout for a TCP session on an SRX Series device?

1 minute

1 hour

30 seconds

30 minutes

NO.54 Which statement describes the AppTrack module in AppSecure?

The AppTrack module provides enforcement with the ability to block traffic, based on specific applications.

The AppTrack module provides control by the routing of traffic, based on the application.

The AppTrack module identifies the applications that are present in network traffic.

The AppTrack module provides visibility and volumetric reporting of application usage on the network.

NO.55 You are asked to ensure that if the session table on your SRX Series device gets close to exhausting its resources, that you enforce a more aggress.ve age-out of existing flows. In this scenario, which two statements are correct? (Choose two.)

The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the low-watermark value is met.

The early-ageout configuration specifies the timeout value, in seconds, that will be applied once the high-watermark value is met.

The high-watermark configuration specifies the percentage of how much of the session table is left before disabling a more aggressive age- out timer.

The high-watermark configuration specifies the percentage of how much of the session table can be allocated before applying a more aggressive age-out timer

NO.56 What are two elements of a custom IDP/IPS attack object? (Choose two.)

the attack signature

the severity of the attack

the destination zone

the exempt rulebase

NO.57 Which three statements about SRX Series device chassis clusters are true? (Choose three.)

Chassis cluster control links must be configured using RFC 1918 IP addresses.

Chassis cluster member devices synchronize configuration using the control link.

A control link failure causes the secondary cluster node to be disabled.

Recovery from a control link failure requires that the secondary member device be rebooted.

Heartbeat messages verify that the chassis cluster control link is working.

NO.58 Which two statements are true about mixing traditional and unified security policies? (Choose two.)

When a packet matches a unified security policy, the evaluation process terminates

Traditional security policies must come before unified security policies

Unified security policies must come before traditional security policies

When a packet matches a traditional security policy, the evaluation process terminates

NO.59 Click the Exhibit button.

You have deployed Sky ATP to protect your network from attacks so that users are unable to download malicious files. However, after a user attempts to download a malicious file, they are still able to communicate through the SRX Series device.
Referring to the exhibit, which statement is correct?

Change the security policy from a standard security policy to a unified security policy.

Remove the fallback options in the advanced anti-malware policy.

Configure a security intelligence policy and apply it to the security policy.

Lower the verdict threshold in the advanced anti-malware policy.

NO.60 Data plane logging operates in which two modes? (Choose two.)

syslog

binary

event

stream

NO.61 What information does encrypted traffic insights (ETI) use to notify SRX Series devices about known malware sites?

certificates

dynamic address groups

MAC addresses

domain names

NO.62 What are two benefits of using a vSRX in a software-defined network? (Choose two.)

scalability

no required software license

granular security

infinite number of interfaces

NO.63 You have deployed JSA and you need to view events and network activity that match rule criteria.
You must view this data using a single interface.
Which JSA feature should you use in this scenario?

Log Collector

Assets

Network Activity

Offense Manager