JN0-334 Free Certification Exam Material from PracticeVCE with 93 Questions
Use Real JN0-334 - 100% Cover Real Exam Questions
NEW QUESTION 43
What are two types of attack objects used by IPS on SRX Series devices? (Choose two.)
- A. DDoS-based attacks
- B. protocol anomaly-based attacks
- C. signature-based attacks
- D. spam-based attacks
Answer: B,C
NEW QUESTION 44
Your manager asks you to find employees that are watching YouTube dunng office hours Which AppSecure component would you configure to accomplish this task?
- A. AppQoS
- B. AppQoE
- C. AppTrack
- D. AppFW
Answer: C
NEW QUESTION 45
You want to collect events and flows from third-party vendors.
Which solution should you deploy to accomplish this task?
- A. JSA
- B. Contrail
- C. Policy Enforcer
- D. Log Director
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION 46
You want to use Sky ATP to protect your network, however, company policy does not allow you to send any files to the cloud. Which Sky ATP feature should you use in this situation?
- A. Only use on-premises local Sky ATP server anti-malware file scanning.
- B. Only use on-box SRX anti-malware file scanning
- C. Only use cloud-based Sky ATP file hash lookups
- D. Only use cloud-based Sky ATP file blacklists.
Answer: D
NEW QUESTION 47
Click the Exhibit button.
You have configured NAT on your network so that Host A can communicate with Server B.
You want to ensure that Host C can initiate communication with Host A using Host A's reflexive address.
Referring to the exhibit, which parameter should you configure on the SRX Series device to satisfy this requirement?
- A. Configure persistent NAT with the any-remote-hostparameter.
- B. Configure persistent NAT with the port-overloadingparameter.
- C. Configure persistent NAT with the target-host-portparameter.
- D. Configure persistent NAT with the target-hostparameter.
Answer: D
NEW QUESTION 48
Which security log message formal reduces the consumption of CPU and storage?
- A. BSD syslog
- B. binary
- C. WELF
- D. structured syslog
Answer: B
NEW QUESTION 49
You want to support reth LAG interfaces on a chassis cluster.
What must be enabled on the interconnecting switch to accomplish this task?
- A. LLDP
- B. 802.3ad
- C. RSTP
- D. swfab
Answer: B
Explanation:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-chassis-cluster- redundant-ethernet-lag-interfaces.html
NEW QUESTION 50
What are two examples of RTOs? (Choose two.)
- A. IPsec SA entries
- B. fabric link probes
- C. control link heartbeats
- D. session table entries
Answer: B,C
NEW QUESTION 51
Click the Exhibit button.
You have an IPsec tunnel between two devices. You clear the IKE security associations, but traffic continues to flow across the tunnel.
Referring to the exhibit, which statement is correct in this scenario?
- A. The IKE security association immediately reestablishes
- B. The traffic is no longer encrypted
- C. The traffic is using an alternate path
- D. The IPsec security association is independent from the IKE security association
Answer: B,D
NEW QUESTION 52
You are asked to convert two standalone SRX Series devices to a chassis cluster deployment. You must ensure that your IPsec tunnels will be compatibla with the new deployment.
In this scenario, which two interfaces should be used when binding your tunnel endpoints? (Choose two.)
- A. lo0
- B. reth
- C. ge
- D. pp0
Answer: B,C
NEW QUESTION 53
After a software upgrade on an SRX5800 chassis cluster, you notice that both node0 and node1 are in the primary state, when node1 should be secondary. All control and fabric links are operating normally.
In this scenario, which step must you perform to recover the cluster?
- A. Execute the request system reboot command on node0.
- B. Execute the request system reboot command on node1.
- C. Execute the request system software add command on node1.
- D. Execute the request system software rollback command on node0.
Answer: B
NEW QUESTION 54
Click the Exhibit button.
The output shown in the exhibit is displayed in which format?
- A. sd-syslog
- B. syslog
- C. binary
- D. WELF
Answer: B
NEW QUESTION 55
Data plane logging operates in which two modes? (Choose two.)
- A. stream
- B. binary
- C. event
- D. syslog
Answer: A,C
NEW QUESTION 56
Click the Exhibit button.
Referring to the exhibit, what will happen if client 172.16.128.50 tries to connect to destination
192.168.150.3 using HTTP?
- A. The client will be denied by policy p3.
- B. The client will be permitted by policy p1.
- C. The client will be permitted by the global policy.
- D. The client will be denied by policy p2.
Answer: B
NEW QUESTION 57
Which two statements are true about virtualized SRX Series devices? (Choose two.)
- A. vSRX can be deployed in transparent mode.
- B. cSRX can be deployed in routed mode.
- C. cSRX cannot be deployed in routed mode.
- D. vSRX cannot be deployed in transparent mode.
Answer: A,B
Explanation:
https://www.juniper.net/documentation/en_US/csrx/information-products/pathway-pages/security-csrx-contrail-guide-pwp.pdf
NEW QUESTION 58
What are two management methods for cSRX? (Choose two.)
- A. UCLI
- B. Network Director
- C. J-Web
- D. Contrail
Answer: B,D
NEW QUESTION 59
......
Dumps Brief Outline Of The JN0-334 Exam: https://www.practicevce.com/Juniper/JN0-334-practice-exam-dumps.html
JN0-334 Training & Certification Get Latest JNCIS-SEC : https://drive.google.com/open?id=1FkVFE4KHOG2OYyFY3-32eXd5jfFN0XDH