[Sep 04, 2021] JN0-334 Ultimate Study Guide - Prep4King
Ultimate Guide to Prepare JN0-334 Certification Exam for JNCIS-SEC in 2021
NEW QUESTION 31
What is the maximum number of supported interfaces on a vSRX hosted in a VMware environment?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION 32
You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution.
Which action would accomplish this task?
- A. Configure the SAML settings.
- B. Configure whitelist rules
- C. Configure YARA rules.
- D. Configure a new anti-virus configuration rule.
Answer: C
Explanation:
Explanation/Reference:
NEW QUESTION 33
Click the Exhibit button.
Which statement would explain why the IP-monitoring feature is functioning incorrectly?
- A. The secondary IP address should be on a different subnet than the reth IP address.
- B. The monitored IP address is not on the same subnet as the reth IP address.
- C. The secondary IP address is the same as the reth IP address.
- D. The global weight value is too large for the configured global threshold.
Answer: C
NEW QUESTION 34
You are asked to convert two standalone SRX Series devices to a chassis cluster deployment. You must ensure that your IPsec tunnels will be compatible with the new deployment In this scenario: which two interfaces should be used when binding your tunnel endpoints? (Choose two)
- A. reth
- B. ge
- C. lo0
- D. pp0
Answer: A,C
NEW QUESTION 35
Click the Exhibit button.
You have configured your SRX Series device to receive authentication information from a JIMS server.
However, the SRX is not receiving any authentication information.
Referring to the exhibit, how would you solve the problem?
- A. Use the JIMS Administrator user interface to add the SRX device as client.
- B. Change the SRX configuration to connect to the JIMS server using HTTP.
- C. Update the IP address of the JIMS server
- D. Generate an access token on the SRX device that matches the access token on the JIMS server.
Answer: D
NEW QUESTION 36
You are deploying the Junos application firewall feature in your network In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)
- A. destination port
- B. source port
- C. destination IP address
- D. source IP address
Answer: C,D
NEW QUESTION 37
Click the Exhibit button.
Referring to the configuration shown in the exhibit, which two statements are true? (Choose two.)
- A. The syslog is configured for an info facility.
- B. The syslog is configured for a user facility.
- C. The log is being sent to a remote server.
- D. The log is being stored on the local Routing Engine.
Answer: B,C
Explanation:
https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/syslog-edit-system.html
NEW QUESTION 38
Click the Exhibit button.
Referring to the exhibit, what will happen if client 172.16.128.50 tries to connect to destination
192.168.150.111 using HTTP?
- A. The client will be permitted by policy p2.
- B. The client will be permitted by policy p1.
- C. The client will be denied by policy p2.
- D. The client will be denied by policy p1.
Answer: B
NEW QUESTION 39
What are two types of collectors for the JATP core engine? (Choose two)
- A. Web
- B. e-mail
- C. telemetry
- D. SNMP
Answer: C
NEW QUESTION 40
What are two examples of RTOs? (Choose two.)
- A. IPsec SA entries
- B. control link heartbeats
- C. session table entries
- D. fabric link probes
Answer: B,C
NEW QUESTION 41
Click the Exhibit button.
Referring to the exhibit, which two values in the JIMS SRX client configuration must match the values configured on the SRX client? (Choose two.)
- A. IPv6 Reporting
- B. Token Lifetime
- C. Client Secret
- D. Client ID
Answer: C,D
NEW QUESTION 42
Which security log message formal reduces the consumption of CPU and storage?
- A. BSD syslog
- B. binary
- C. WELF
- D. structured syslog
Answer: B
NEW QUESTION 43
Which two protocols are supported for Sky ATP advanced anti-malware scanning? (Choose two.)
- A. SMTP
- B. POP3
- C. MAPI
- D. IMAP
Answer: A,D
Explanation:
Explanation
NEW QUESTION 44
Data plane logging operates in which two modes? (Choose two.)
- A. stream
- B. binary
- C. event
- D. syslog
Answer: A,C
NEW QUESTION 45
You are asked to improve resiliency for individual redundancy groups in an SRX4600 chassis cluster.
Which two features would accomplish this task? (Choose two.)
- A. control link recovery
- B. dual fabric links
- C. interface monitoring
- D. IP address monitoring
Answer: A,B
NEW QUESTION 46
You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone In this scenario, which statement is true?
- A. You must enable the AppTrack feature within the User zone configuration
- B. You must enable the AppTrack feature within the Internet zone configuration
- C. You must enable the AppTrack feature within the interface configuration associated with the User zone
- D. You must enable the AppTrack feature within the ingress interface configuration associated with the Internet zone
Answer: A
NEW QUESTION 47
What are two valid JIMS event log sources? (Choose two.)
- A. Microsoft Exchange Server event logs
- B. Microsoft Active Directory server event logs
- C. Microsoft Windows Server 2012 audit logs
- D. Microsoft Active Directory audit logs
Answer: A,B
Explanation:
Explanation/Reference:
NEW QUESTION 48
Which security log message formal reduces the consumption of CPU and storage?
- A. BSD syslog
- B. binary
- C. WELF
- D. structured syslog
Answer: A
NEW QUESTION 49
Exhibit.
Referring to the exhibit, which two devices are considered to be part of the secure fabric site with Policy Enforcer? (Choose two )
- A. Server-1
- B. QFX-1
- C. SRX-1
- D. Server-2
Answer: A
NEW QUESTION 50
Click the Exhibit button.
Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer.
To complete this task, where should you configure the default gateway for the User-1 device?
- A. the interface on SRX-1 that connects to QFX-2
- B. the irb interface on QFX-1
- C. the irb interface on QFX-2
- D. the interface of QFX-1 that connects to User-1
Answer: B
NEW QUESTION 51
Your network uses a remote e-mail server that is used to send and receive e-mails for your users.
In this scenario, what should you do to protect users from receiving malicious files through e-mail?
- A. Deploy Sky ATP IMAP e-mail protection
- B. Deploy Sky ATP POP3 e-mail protection
- C. Deploy Sky ATP MAPI e-mail protection
- D. Deploy Sky ATP SMTP e-mail protection
Answer: D
NEW QUESTION 52
Which statement about the control link in a chassis cluster is correct?
- A. Recovering from a control link failure requires a reboot.
- B. The control messages sent over the link are encrypted by default.
- C. A cluster can have redundant control links.
- D. The control link heartbeats contain the configuration file of the nodes.
Answer: C
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-chassis-cluster-dual- control-links.html
NEW QUESTION 53
You are asked to enable AppTrack to monitor application traffic from hosts in the User zone destined to hosts in the Internet zone.
In this scenario, which statement is true?
- A. You must enable the AppTrack feature within the interface configuration associated with the User zone.
- B. You must enable the AppTrack feature within the Internet zone configuration.
- C. You must enable the AppTrack feature within the User zone configuration.
- D. You must enable the AppTrack feature within the ingress interface configuration associated with the Internet zone.
Answer: C
NEW QUESTION 54
Exhibit.
The output shown in the exhibit is displayed in which formal?
- A. sd-syslog
- B. binary
- C. WELF
- D. syslog
Answer: C
NEW QUESTION 55
Which two solutions provide a sandboxing feature for finding zero-day malware threats? (Choose two)
- A. Sky
- B. UIPS
- C. JATP
- D. ATP
Answer: C,D
NEW QUESTION 56
......
JNCIS-SEC Fundamentals-JN0-334 Exam-Practice-Dumps: https://www.prep4king.com/JN0-334-exam-prep-material.html
