Maximum Grades By Making ready With JN0-335 Dumps UPDATED 2023 [Q13-Q32] : Latest Exam Prep : http://certify.vceprep.com

QUESTION 13
Which two statements are correct about server-protection SSP proxy? (Choose two.)

The server-protection SSL proxy intercepts the server certificate.

The server-protection SSL proxy is also known as SSL reverse proxy.

The server-protection SSL proxy forwards the server certificate after modification.

The server-protection SSL proxy acts as the server from the client’s perspective.

QUESTION 14
Click the Exhibit button.

Referring to the exhibit, which two values in the JIMS SRX client configuration must match the values configured on the SRX client? (Choose two.)

IPv6 Reporting

Client ID

Client Secret

Token Lifetime

QUESTION 15
Which two statements are true about virtualized SRX Series devices? (Choose two.)

vSRX cannot be deployed in transparent mode.

cSRX can be deployed in routed mode.

cSRX cannot be deployed in routed mode.

vSRX can be deployed in transparent mode.

QUESTION 16
Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)

JIMS synchronizes Active Directory authentication information between a primary and secondary JIMS server.

JIMS forwards Active Directory authentication information to SRX Series client devices.

JIMS collects and maintains a database of authentication information from Active Directory domains.

JIMS replicates Active Directory authentication information to non-trusted Active Directory domain controllers.

QUESTION 17
Which two settings must be enabled on the hypervisor in a vSRX deployment to ensure proper chassis cluster operation? (Choose two.)

Control links must operate in promiscuous mode.

Control links must have an MTU of 9000.

Fabric links must operate in promiscuous mode.

Fabric links must have an MTU of 9000.

QUESTION 18
You are using the JIMS Administrator user interface to add multiple SRX client devices. You must share common configuration attributes across the SRX clients without having to re-enter those attributes for each SRX client instance.
Which JIMS Administrator feature would be used to accomplish this task?

JIMS automation

JIMS templates

JIMS client profiles

JIMS client defaults

QUESTION 19
Click the Exhibit button.

Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer.
To complete this task, where should you configure the default gateway for the User-1 device?

the irb interface on QFX-2

the irb interface on QFX-1

the interface of QFX-1 that connects to User-1

the interface on SRX-1 that connects to QFX-2

QUESTION 20
After a software upgrade on an SRX5800 chassis cluster, you notice that both node0 and node1 are in the primary state, when node1 should be secondary. All control and fabric links are operating normally.
In this scenario, which step must you perform to recover the cluster?

Execute the request system reboot command on node1.

Execute the request system software rollback command on node0.

Execute the request system software add command on node1.

Execute the request system reboot command on node0.

QUESTION 21
Click the Exhibit button.

The output shown in the exhibit is displayed in which format?

syslog

sd-syslog

binary

WELF

QUESTION 22
Click the Exhibit button.

You have configured the scheduler shown in the exhibit to prevent users from accessing certain websites from 1:00 PM to 3:00 PM Monday through Friday. This policy will remain in place until further notice. When testing the policy, you determine that the websites are still accessible during the restricted times.
In this scenario, which two actions should you perform to solve the problem? (Choose two.)

Add the saturday exclude parameter and the sunday exclude parameter to ensure weekends are excluded from the schedule.

Use the 13:00 parameter and the 15:00 parameter when specifying the time.

Use the start-date parameter to specify the date for each Monday and use the stop-date parameter to specify the date for each Friday.

Use the PM parameter when specifying the time in the schedule.

QUESTION 23
What are three primary functions of JATP? (Choose three.)

detection

encryption

optimization

analytics

mitigation

QUESTION 24
Which two statements describe superflows in Juniper Secure Analytics? (Choose two.)

JSA only supports Type A and Type C superflows.

Superflows can negatively impact licensing limitations.

Disk space usage is reduced on the JSA device.

Superflows combine many flows into a single flow.

QUESTION 25
When considering managed sessions, which configuration parameter determines how full the session table must be to implement the early age-out function? (Choose two)

session service timeout

high waremark

low watermark

policy rematch

QUESTION 26
Which solution should you use if you want to detect known attacks using signature-based methods?

SSL proxy

JIMS

IPS

ALGs

QUESTION 27
Click the Exhibit button.

Referring to the configuration shown in the exhibit, which two statements are true? (Choose two.)

The log is being stored on the local Routing Engine.

The log is being sent to a remote server.

The syslog is configured for a user facility.

The syslog is configured for an info facility.

QUESTION 28
Which statement about the control link in a chassis cluster is correct?

A cluster can have redundant control links.

Recovering from a control link failure requires a reboot.

The control link heartbeats contain the configuration file of the nodes.

The control messages sent over the link are encrypted by default.

QUESTION 29
Click the Exhibit button.

Referring to the exhibit, which statement is true?

IDP blocks root users.

IDP closes the connection on matched sessions.

IDP ignores the connection on matched sessions.

IDP blocks all users.

QUESTION 30
You want to use Sky ATP to protect your network; however, company policy does not allow you to send any files to the cloud.
Which Sky ATP feature should you use in this situation?

Only use on-premises local Sky ATP server anti-malware file scanning.

Only use cloud-based Sky ATP file hash lookups.

Only use on-box SRX anti-malware file scanning.

Only use cloud-based Sky ATP file blacklists.

QUESTION 31
What are two elements of a custom IDP/IPS attack object? (Choose two.)

the attack signature

the severity of the attack

the destination zone

the exempt rulebase

QUESTION 32
You want to collect events and flows from third-party vendors.
Which solution should you deploy to accomplish this task?

Log Director

JSA

Policy Enforcer

Contrail