Security, Specialist (JNCIS-SEC) - JN0-336 Exam Practice Test

Question 1

Which IDP action is also referred to as a silent discard?

A. ignore connection

B. close client and server

C. drop packet

D. no action

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

You are asked to use Junos Space Security Director to download the latest application signatures in the AppID database.
In this scenario, which two statements are correct? (Choose two.)

A. The AppID database is stored on a local storage server in the management network.

B. The AppID database is stored in Junos Space Security Director.

C. The AppID database is maintained by a third-party host.

D. The AppID database is stored on the managed SRX Series device.

Correct Answer: B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Which two services would an SRX Series device use to connect to an LDAP server for identity-aware security policies? (Choose two.)

A. Active Directory

B. JIMS

C. RADIUS

D. TACACS+

Correct Answer: A,B

Question 4

Which two statements are correct about Juniper ATP Cloud malware analysis? (Choose two.)

A. If a match exists in cache, that threat score is sent to the SRX Series device and the analysis stops.

B. If no match exists in cache, the first analysis feature to generate a threat score is transmitted to the SRX Series device.

C. If a match exists in cache, that threat score is sent to the SRX Series device and the analysis continues.

D. If no match exists in cache, the remaining analysis features are processed with the cumulative threat score transmitted to the SRX Series device.

Correct Answer: A,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

What are two ways to help reduce false positives for an IDP rule? (Choose two.)

A. Create an exempt rule.

B. Remove the attack object from the rule.

C. Configure a terminal rule at the end of the rule base.

D. Change the rule to a lower severity action.

Correct Answer: A,B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

You are asked to ensure that traffic that matches an IDP policy is not impacted until administrators have a chance to evaluate it.
In this scenario, which IP action should be configured for the policy?

A. ip-notify

B. ip-close

C. ip-block

D. ip-connection-rate-limit

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

What is a function of the Juniper Identity Management Service?

A. encrypting user e-mail

B. logging malicious code sent through ingress and egress ports

C. maintaining a centralized authentication table

D. encrypting network data traffic

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Juniper Security, Specialist (JNCIS-SEC) - JN0-336 Exam Practice Test

Latest Update

Useful Links

Contact Us