Security, Specialist (JNCIS-SEC): JN0-335 Dumps Updated to V10.03 For Juniper JNCIS-SEC Certification

1. A client has attempted communication with a known command-and-control server and it has reached the configured threat level threshold.

Which feed will the clients IP address be automatically added to in this situation?

2. Exhibit

When trying to set up a server protection SSL proxy, you receive the error shown.

What are two reasons for this error? (Choose two.)

3. You are asked to reduce the load that the JIMS server places on your

Which action should you take in this situation?

4. Exhibit

You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172 25.11.0/24 subnet to the Internet You create a policy named permit-http between the trust and untrust zones that permits HTTP traffic. When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.

Which two actions would correct the error? (Choose two.)

5. What are two types of system logs that Junos generates? (Choose two.)

6. You are asked to ensure that if the session table on your SRX Series device gets close to exhausting its resources, that you enforce a more aggress.ve age-out of existing flows.

In this scenario, which two statements are correct? (Choose two.)

7. Exhibit

Referring to the exhibit which statement is true?

8. When a security policy is deleted, which statement is correct about the default behavior of active sessions allowed by that policy?

9. You want to use IPS signatures to monitor traffic.

Which module in the AppSecure suite will help in this task?

10. Exhibit

Using the information from the exhibit, which statement is correct?

11. After JSA receives external events and flows, which two steps occur? (Choose two.)

12. Your company is using the Juniper ATP Cloud free model. The current inspection profile is set at 10 MB You are asked to configure ATP Cloud so that executable files up to 30 MB can be scanned while at the same time minimizing the change in scan time for other file types.

Which configuration should you use in this scenario?

13. What are two benefits of using a vSRX in a software-defined network? (Choose two.)

14. You enable chassis clustering on two devices and assign a cluster ID and a node ID to each device.

In this scenario, what is the correct order for rebooting the devices?

15. Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)

16. Which three statements about SRX Series device chassis clusters are true? (Choose three.)

17. Which two devices would you use for DDoS protection with Policy Enforcer? (Choose two.)

18. You have implemented a vSRX in your VMware environment. You want to implement a second vSRX Series device and enable chassis clustering.

Which two statements are correct in this scenario about the control-link settings? (Choose two.)

19. Which two statements are true about the fab interface in a chassis cluster? (Choose two.)

20. You want to manually failover the primary Routing Engine in an SRX Series high availability cluster pair.

Which step is necessary to accomplish this task?