Top Juniper JN0-334 Courses Online - Updated [Aug-2022]
JN0-334 Practice Dumps - Verified By TestkingPass Updated 93 Questions
Juniper JN0-334 Exam Topics:
| Section | Objectives |
|---|---|
| Security Policies (Advanced) | Identify the concepts, benefits, or operation of security policies
Demonstrate knowledge of how to configure, monitor, or troubleshoot security policies |
| Juniper Identify Management Service (JIMS) | Identify concepts, general features, or functionality of JIMS
Demonstrate knowledge of how to configure, monitor, or troubleshoot JIMS |
| Advance Threat Prevention (ATP) | Identify the concepts, benefits, or operation of Sky ATP
Demonstrate knowledge of how to configure, monitor, or troubleshoot Sky ATP Identify the concepts, benefits, or operation of JATP
Demonstrate knowledge of how to configure, monitor, or troubleshoot JATP |
| Application Security | Identify application security concepts
Demonstrate knowledge how to configure, monitor, or troubleshoot application security Identify application IDP/IDS concepts
Demonstrate knowledge how to configure, monitor, or troubleshoot IDP/IDS |
| Virtual SRX or cSRX | Describe concepts, general features, or functionality of virtualized security using vSRX or cSRX
|
Recommended Online Course: Juniper Security
The Juniper Security (JSEC) course is a five-day training program that features the Junos Space, CLI, and Junos J-Web to validate the candidates’ ability to manage the concepts of Juniper Connected Security. Plus, it has extensive demonstrations and hands-on labs to give the students detailed experience in monitoring and configuring the basic device operations and the Juniper Junos OS. At the beginning of your training, Juniper expects that you must have already demonstrated your capability to work with the Juniper OS Release 19.1R1.6, JSA v7.3.2, JATP 5.0.6.0, Security Director 19.1R1, Junos Space 19.1R1, and JIMS 1.1.5R1, which form a critical component of the online course. All candidates looking to enroll in this course must also have fundamental networking knowledge in addition to proven experience working with the Open Systems Interconnection (OSI) and TCP/IP suite. Besides, they must have registered for and passed the mid-level Juniper Security course. In a nutshell, the Juniper Security (JSEC) course outline is divided into specific sections, according to what the candidates will be covering every day of the training. On the first day, the instructors will introduce the course. Then, in the next session, they will give a brief overview of the CLI and also cover advanced security policy, application security theory, application security implementation, and intrusion prevention alongside detection. On the second day, applicants will get into security director, Sky ATP implementation, and policy enforcer. Here, candidates will cover such topics as email scanning, Geo IP, the object for the security director, file scanning, and configuration options. On the third day, you should be required to demonstrate your knowledge of JATP implementation, JATP overview, and Juniper Secure Analytics under the subtopics of traffic inspection, data collection, log ingestion, JSA overview, reporting, and incident management to mention a few. On the fourth day, the experienced instructors will now switch their focus to JIMS, SSL Proxy, vSRX, and cSRX. Here, the training will then cover the concepts of SSL proxy configurations, JIMS integration, vSRX use cases, cSRX overview, and vSRX outline. On the last day, the topics of cluster concepts, chassis cluster implementation, and chassis cluster troubleshooting will be extensively covered. This means you must understand chassis cluster configuration and advanced options, chassis cluster case studies, troubleshooting examples, and chassis cluster operations.
NEW QUESTION 17
Which two statements describe how rules are used with Juniper Secure Analytics? (Choose two )
- A. When a rule is triggered. JSA can respond by blocking all traffic from a specific source address
- B. When a rule is triggered. JSA can respond by sending an e-mail to JSA administrators.
- C. A rule defines matching criteria and actions that should be taken when an event matches the rule
- D. Rules are defined on Junos Space Security Director, and then pushed to JSA log collectors
Answer: A,D
NEW QUESTION 18
Which statement describes the function of NAT?
- A. NAT translates a public address to a private address.
- B. NAT encrypts transit traffic in a tunnel.
- C. NAT restricts or permits users individually or in a group.
- D. NAT detects various attacks on traffic entering a security device.
Answer: A
NEW QUESTION 19
Exhibit.
Which two statements describe the output shown in the exhibit"? (Choose two)
- A. Redundancy group 1 experienced an operational failure.
- B. Node 0 is passing traffic for redundancy group 1
- C. Redundancy group 1 was administratively failed over.
- D. Node 1 is passing traffic for redundancy group 1
Answer: A,D
NEW QUESTION 20
When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)
- A. A security policy can only reference a client-protection SSL proxy profile or a server-protection SSL proxy profile.
- B. If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is decrypted.
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-ssl-proxy.html - C. If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is not decrypted.
- D. A security policy can reference both a client-protection SSL proxy profile and a server-protection proxy profile.
Answer: A,C
NEW QUESTION 21
Click the Exhibit button.
The inside server must communicate with the external DNS server. The internal DNS server address is
10.100.75.75. The external DNS server address is 75.75.76.76. Traffic from the inside server to the DNS server fails.
Referring to the exhibit, what is causing the problem?
- A. The static NAT rule must use the global address book entry name for the DNS server.
- B. Source and static NAT cannot be configured at the same time.
- C. The security policy must match the translated source and translated destination address.
- D. The security policy must match the translated destination address.
Answer: D
NEW QUESTION 22
When working with network events on a Juniper Secure Analytics device, flow records come from which source?
- A. tap port
- B. SPAN
- C. mirror
- D. switch
Answer: B
NEW QUESTION 23
What is the correct ordering of Junos policy evaluation from first to last?
- A. global policy > default policy > zone-based policy
- B. global policy > zone-based policy > default policy
- C. zone-based policy > global policy > default policy
- D. default policy > zone-based policy > global policy
Answer: C
NEW QUESTION 24
Which security log message formal reduces the consumption of CPU and storage?
- A. structured syslog
- B. binary
- C. BSD syslog
- D. WELF
Answer: B
NEW QUESTION 25
A routing change occurs on an SRX Series device that involves choosing a new egress interface In this scenario, which statement is true for all affected current sessions?
- A. The current sessions might change based on the corresponding security policy
- B. The current sessions are torn down only if the policy-rematch option has been enabled.
- C. The current sessions do not change
- D. The current sessions are torn down and go through first path processing based on the new route.
Answer: D
NEW QUESTION 26
Which statement is true when destination NAT is performed?
- A. The destination IP address is translated according to the configured source NAT rules and then the security policies are applied.
- B. The destination IP address is translated according to the configured security policies and then the security destination NAT rules are applied.
- C. The source IP address is translated according to the configured destination NAT rules and then the security policies are applied.
- D. The destination IP address is translated according to the configured destination NAT rules and then the security policies are applied.
Answer: D
NEW QUESTION 27
When considering managed sessions, which configuration parameter determines how full the session table must be to implement the early age-out function?
- A. high waremark
- B. policy rematch
- C. session service timeout
- D. low watermark
Answer: A
Explanation:
Explanation
NEW QUESTION 28
The AppQoE module of AppSecure provides which function?
- A. The AppQoE module blocks access to risky applications.
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-appqoe.html#jd0e28 - B. The AppQoE module provides routing, based on network conditions.
- C. The AppQoE module prioritizes important applications.
- D. The AppQoE module provides application-based routing.
Answer: B
NEW QUESTION 29
Which two statements describe application-layer gateways (ALGs)? (Choose two.)
- A. ALGs are designed for specific protocols that require multiple sessions.
- B. ALGs are designed for specific protocols that use a single TCP session.
- C. ALGs can only be configured using Security Director.
- D. ALGs are used with protocols that use multiple ports.
Answer: A,D
NEW QUESTION 30
Which two statements are true about virtualized SRX Series devices? (Choose two.)
- A. vSRX cannot be deployed in transparent mode -
- B. vSRX can be deployed in transparent mode
- C. cSRX can be deployed in routed mode.
- D. cSRX cannot be deployed in routed mode.
Answer: B,C
NEW QUESTION 31
Exhibit.
The output shown in the exhibit is displayed in which format?
- A. syslog
- B. binary
- C. OWELF
- D. sd-syslog
Answer: B
NEW QUESTION 32
Which two solutions provide a sandboxing feature for finding zero-day malware threats? (Choose two.)
- A. JATP
- B. IPS
- C. UTM
- D. Sky ATP
Answer: A,D
Explanation:
Explanation/Reference:
NEW QUESTION 33
What information does JIMS collect from domain event log sources? (Choose two)
- A. For user login events. JIMS collects the login source IP address and username information
- B. For device login events. JIMS collects the device IP address and machine name information
- C. For user login events. JIMS collects the username and group membership information.
- D. For device login events. JIMS collects the device IP address and operating system version.
Answer: B
NEW QUESTION 34
Which two statements describe application-layer gateways (ALGs)? (Choose two)
- A. ALGs can only be configured using Security Director
- B. ALGs are designed for specific protocols that use a single TCP session
- C. ALGs are designed for specific protocols that require multiple sessions.
- D. ALGs are used with protocols that use multiple ports.
Answer: D
NEW QUESTION 35
Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)
- A. JIMS synchronizes Active Directory authentication information between a primary and secondary JIMS server.
- B. JIMS forwards Active Directory authentication information to SRX Series client devices.
- C. JIMS replicates Active Directory authentication information to non-trusted Active Directory domain controllers.
- D. JIMS collects and maintains a database of authentication information from Active Directory domains.
Answer: A,D
NEW QUESTION 36
You are asked to convert two standalone SRX Series devices to a chassis cluster deployment. You must ensure that your IPsec tunnels will be compatible with the new deployment In this scenario: which two interfaces should be used when binding your tunnel endpoints? (Choose two)
- A. lo0
- B. pp0
- C. ge
- D. reth
Answer: B
NEW QUESTION 37
......
New (2022) Juniper JN0-334 Exam Dumps: https://www.testkingpass.com/JN0-334-testking-dumps.html