JN0-334のPDF問題集で2022年02月02日最近更新された問題
JN0-334試験問題有効なJN0-334問題集PDF
Juniper JN0-334 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
質問 15
Exhibit.
You are configuring an SRX chassis cluster with the node-specific hostname and management address.
Referring to the exhibit, which configuration completes this requirement?
A)
B)
C)
D)
- A. Option D
- B. Option B
- C. Option A
- D. Option C
正解: A
質問 16
You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution.
Which action would accomplish this task?
- A. Configure whitelist rules
- B. Configure YARA rules.
- C. Configure the SAML settings.
- D. Configure a new anti-virus configuration rule.
正解: B
質問 17
Which two statements describe IPS? (Choose two.)
- A. IPS can be used to prevent future attacks from occurring.
- B. IPS inspects up to Layer 4 in the OSI model.
- C. IPS dynamically sends policy changes to SRX Series devices.
- D. IPS inspects up to Layer 7 in the OSI model.
正解: A,D
質問 18
What is the default timeout period for a TCP session in the session table of a Junos security device?
- A. minute '
- B. 60 minutes
- C. 30 minutes
- D. 15 minutes
正解: C
質問 19
Which three features are part of Juniper Networks' AppSecure suite? (Choose three)
- A. AppOoS
- B. AppFormix
- C. AppQoE
- D. Secure Application Manager
- E. APBR
正解: C,D,E
質問 20
You are using the JIMS Administrator user interface to add multiple SRX client devices. You must share common configuration attributes across the SRX clients without having to re-enter those attributes for each SRX client instance.
Which JIMS Administrator feature would be used to accomplish this task?
- A. JIMS client profiles
- B. JIMS client defaults
- C. JIMS templates
- D. JIMS automation
正解: C
解説:
Explanation/Reference:
質問 21
Exhibit.
You have implemented SSL proxy client protection After implementing this feature your users are complaining about the warning message shown in the exhibit Which action must you perform to eliminate the warning message?
- A. Import the SRX self-signed CA certificate into the SRX certificate public store
- B. Configure the SRX Series device as a trusted site in the client Web browsers
- C. Import the SRX self-signed CA certificate into the client Web browsers
- D. Regenerate the SRX self-signed CA certificate and include the correct organization name
正解: D
質問 22
Click the Exhibit button.
Which two statements are true about the session shown in the exhibit? (Choose two.)
- A. The ALG was enabled by default.
- B. Two security policies are required for bidirectional traffic flow.
- C. The ALG was enabled by manual configuration.
- D. One security policy is required for bidirectional traffic flow.
正解: B,C
質問 23
What is the default timeout period for a TCP session in the session table of a Junos security device?
- A. 60 minutes
- B. 1 minute
- C. 30 minutes
- D. 15 minutes
正解: C
質問 24
Click the Exhibit button.
Referring to the exhibit, which statement is true?
- A. IDP ignores the connection on matched sessions.
- B. IDP blocks all users.
- C. IDP closes the connection on matched sessions.
- D. IDP blocks root users.
正解: A
質問 25
You are asked to convert two standalone SRX Series devices to a chassis cluster deployment. You must ensure that your IPsec tunnels will be compatible with the new deployment In this scenario: which two interfaces should be used when binding your tunnel endpoints? (Choose two)
- A. pp0
- B. ge
- C. lo0
- D. reth
正解: C,D
質問 26
You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution.
Which action would accomplish this task?
- A. Configure whitelist rules
- B. Configure YARA rules.
- C. Configure the SAML settings.
- D. Configure a new anti-virus configuration rule.
正解: B
解説:
Explanation/Reference:
質問 27
Click the Exhibit button.
Referring to the exhibit, which two devices are considered to be part of the secure fabric site with Policy Enforcer? (Choose two.)
- A. Server-1
- B. QFX-1
- C. Server-2
- D. SRX-1
正解: B,D
解説:
Explanation/Reference:
質問 28
Exhibit.
The output shown in the exhibit is displayed in which formal?
- A. WELF
- B. syslog
- C. binary
- D. sd-syslog
正解: B
質問 29
Click the Exhibit button.
The output shown in the exhibit is displayed in which format?
- A. WELF
- B. syslog
- C. binary
- D. sd-syslog
正解: D
質問 30
You are troubleshooting advanced policy-based routing (APBR).
Which two actions should you perform in this scenario? (Choose two.)
- A. Review the APBR statistics for matching rules and route modifications.
- B. Verify that the APBR profiles are applied to the egress zone.
- C. Inspect the application system cache for the application entry.
- D. Verity inet.0 for correct route leaking.
正解: A,C
質問 31
Click the Exhibit button.
Referring to the SRX Series flow module diagram shown in the exhibit, where is IDP/IPS processed?
- A. Security Policy
- B. Forwarding Lookup
- C. Screens
- D. Services ALGs
正解: D
質問 32
What are two examples of RTOs? (Choose two.)
- A. fabric link probes
- B. control link heartbeats
- C. IPsec SA entries
- D. session table entries
正解: C,D
解説:
The data plane software creates RTOs for UDP and TCP sessions and tracks state changes. It also synchronizes traffic for IPv4 pass-through protocols such as Generic Routing Encapsulation (GRE) and IPsec. https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-chassis-cluster-data-plane-interfaces.html#id-45975
質問 33
Exhibit.
Which two statements are true about the configuration shown in the exhibit? (Choose two )
- A. The session is removed from the session table after 10 milliseconds of inactivity.
- B. Aggressive aging is triggered if the session table reaches 80% capacity
- C. The session is removed from the session table after 10 seconds of inactivity.
- D. Aggressive aging is triggered if the session table reaches 95% capacity.
正解: C
質問 34
What are two types of collectors for the JATP core engine? (Choose two)
- A. telemetry
- B. e-mail
- C. SNMP
- D. Web
正解: A
質問 35
Which three statements are correct about fabric interfaces on the SRX5800? (Choose three.)
- A. Fabric interfaces must be user-assigned interfaces.
- B. Fabric interfaces must be same interface type.
- C. Fabric interfaces must be system-assigned interfaces.
- D. Fabric interfaces must have a user-assigned IP address.
- E. Fabric interfaces must be on the same Layer 2 segment.
正解: B,C,E
質問 36
You want to support reth LAG interfaces on a chassis cluster.
What must be enabled on the interconnecting switch to accomplish this task?
- A. swfab
- B. 802.3ad
- C. RSTP
- D. LLDP
正解: B
質問 37
Which two statements are true about virtualized SRX Series devices? (Choose two.)
- A. cSRX can be deployed in routed mode.
- B. cSRX cannot be deployed in routed mode.
- C. vSRX cannot be deployed in transparent mode.
- D. vSRX can be deployed in transparent mode.
正解: A,D
解説:
https://www.juniper.net/documentation/en_US/csrx/information-products/pathway-pages/security-csrx-contrail-guide-pwp.pdf
質問 38
Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)
- A. JIMS forwards Active Directory authentication information to SRX Series client devices.
- B. JIMS replicates Active Directory authentication information to non-trusted Active Directory domain controllers.
- C. JIMS synchronizes Active Directory authentication information between a primary and secondary JIMS server.
- D. JIMS collects and maintains a database of authentication information from Active Directory domains.
正解: C,D
質問 39
......
JN0-334問題集合格確定させる練習には93問があります：https://jp.fast2test.com/JN0-334-premium-file.html