A fully updated 2021 JN0-334 Exam Dumps exam guide from training expert DumpStillValid
Provides complete coverage of every objective on exam and exam preparation JN0-334
NEW QUESTION 10
Exhibit.
Which two statements describe the output shown in the exhibit"? (Choose two)
- A. Node 1 is passing traffic for redundancy group 1
- B. Redundancy group 1 experienced an operational failure.
- C. Redundancy group 1 was administratively failed over.
- D. Node 0 is passing traffic for redundancy group 1
Answer: A,C
NEW QUESTION 11
You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution.
Which action would accomplish this task?
- A. Configure the SAML settings.
- B. Configure whitelist rules
- C. Configure YARA rules.
- D. Configure a new anti-virus configuration rule.
Answer: C
NEW QUESTION 12
Which three features are parts of Juniper Networks' AppSecure suite? (Choose three.)
- A. AppFormix
- B. Secure Application Manager
- C. AppQoS
- D. AppQoE
- E. APBR
Answer: C,D,E
NEW QUESTION 13
How many nodes are configurable in a chassis cluster using SRX Series devices?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION 14
You are deploying the Junos application firewall feature in your network In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)
- A. destination port
- B. source IP address
- C. source port
- D. destination IP address
Answer: C,D
NEW QUESTION 15
Click the Exhibit button.
Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer.
To complete this task, where should you configure the default gateway for the User-1 device?
- A. the interface on SRX-1 that connects to QFX-2
- B. the irb interface on QFX-1
- C. the irb interface on QFX-2
- D. the interface of QFX-1 that connects to User-1
Answer: B
NEW QUESTION 16
What are two examples of RTOs? (Choose two.)
- A. IPsec SA entries
- B. fabric link probes
- C. control link heartbeats
- D. session table entries
Answer: B,C
NEW QUESTION 17
Which security log message format reduces the consumption of CPU and storage?
- A. BSD syslog
- B. binary
- C. WELF
- D. structured syslog
Answer: A
NEW QUESTION 18
You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution Which action would accomplish this task?
- A. Configure a new anti-virus configuration rule
- B. Configure the SAML settings.
- C. Configure whitelist rules
- D. Configure YARA rules
Answer: B
NEW QUESTION 19
Click the Exhibit button.
Referring to the exhibit, which statement is true?
- A. IDP blocks root users.
- B. IDP closes the connection on matched sessions.
- C. IDP blocks all users.
- D. IDP ignores the connection on matched sessions.
Answer: D
NEW QUESTION 20
Which two statements describe JSA? (Choose two.)
- A. Security Director must be used to view third-party events rom JSA flow collectors.
- B. JSA events must be manually imported into Security Directory using an SSH connection.
- C. JSA supports events and flows from Junos devices, including third-party devices.
- D. JSA can be used as a log node with Security Director or as a standalone solution.
Answer: C,D
NEW QUESTION 21
Which solution should you use if you want to detect known attacks using signature-based methods?
- A. ALDs
- B. IPS
- C. JIMS
- D. SSL proxy
Answer: A
NEW QUESTION 22
Which two statements are true about virtualized SRX Series devices? (Choose two.)
- A. cSRX can be deployed in routed mode.
- B. cSRX cannot be deployed in routed mode.
- C. vSRX cannot be deployed in transparent mode -
- D. vSRX can be deployed in transparent mode
Answer: A,D
NEW QUESTION 23
Click the Exhibit button.
You are trying to create a security policy on your SRX Series device that permits HTTP traffic from your private 172.25.11.0/24 subnet to the Internet. You create a policy named permit - http between the trust and untrust zones that permits HTTP traffic.
When you issue a commit command to apply the configuration changes, the commit fails with the error shown in the exhibit.
Which two actions would correct the error? (Choose two.)
- A. Execute the Junos commit full command to override the error and apply the configuration.
- B. Create a custom application named http at the [edit applications] hierarchy.
- C. Modify the security policy to use the built-in junos-http application.
- D. Issue the rollback 1command from the top of the configuration hierarchy and attempt the commit again.
Answer: A,C
NEW QUESTION 24
The AppQoE module of AppSecure provides which function?
- A. The AppQoE module prioritizes important applications.
- B. The AppQoE module provides application-based routing
- C. The AppQoE module provides routing, based on network conditions
- D. The AppQoE module blocks access to risky applications
Answer: C
NEW QUESTION 25
Click the Exhibit button.
A customer would like to monitor their VPN using dead peer detection.
Referring to the exhibit, for how many minutes was the peer down before the customer was notified?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION 26
Click the Exhibit button.
You are configuring an SRX chassis cluster with the node-specific hostname and management address.
Referring to the exhibit, which configuration completes this requirement?
- A.
- B.
- C.
- D.
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 27
The AppQoE module of AppSecure provides which function?
- A. The AppQoE module prioritizes important applications.
- B. The AppQoE module blocks access to risky applications.
- C. The AppQoE module provides routing, based on network conditions.
- D. The AppQoE module provides application-based routing.
Answer: D
Explanation:
Explanation
NEW QUESTION 28
Click the Exhibit button.
Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer.
To complete this task, where should you configure the default gateway for the User-1 device?
- A. the irb interface on QFX-2
- B. the interface on SRX-1 that connects to QFX-2
https://www.juniper.net/documentation/en_US/release-independent/nce/topics/example/nce-162-sdsn-example.html - C. the interface of QFX-1 that connects to User-1
- D. the irb interface on QFX-1
Answer: A
NEW QUESTION 29
You are asked to convert two standalone SRX Series devices to a chassis cluster deployment. You must ensure that your IPsec tunnels will be compatible with the new deployment In this scenario: which two interfaces should be used when binding your tunnel endpoints? (Choose two)
- A. reth
- B. ge
- C. lo0
- D. pp0
Answer: A,C
NEW QUESTION 30
Click the Exhibit button.
You are configuring an OSPF session between two SRX Series devices. The session will not come up. Referring to the exhibit, which configuration change will solve this problem?
- A. Configure the application junos-ospf parameter in the allow-trusted-traffic security policy.
- B. Configure a loopback interface and add it to the trust zone.
- C. Configure the host-inbound-traffic protocols ospf parameter in the trust security zone.
- D. Configure the host-inbound-traffic system-services any-service parameter in the trust security zone.
Answer: B
NEW QUESTION 31
What are two types of attack objects used by IPS on SRX Series devices? (Choose two.)
- A. DDoS-based attacks
- B. protocol anomaly-based attacks
- C. signature-based attacks
- D. spam-based attacks
Answer: B,C
NEW QUESTION 32
Click the Exhibit button.
Which two statements describe the output shown in the exhibit? (Choose two.)
- A. Redundancy group 1 experienced an operational failure.
- B. Node 0 is controlling traffic for redundancy group 1.
- C. Redundancy group 1 was administratively failed over.
- D. Node 1 is controlling traffic for redundancy group 1.
Answer: C,D
NEW QUESTION 33
......
Tested Material Used To JN0-334: https://www.dumpstillvalid.com/JN0-334-prep4sure-review.html
