JN0-336 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
Which three different objects would be created, modified, cloned, and deleted in the Shared Objects workspace of Junos Space Security Director? (Choose three.)

A.geo IP
B.IP address
C.audit logs
D.policy enforcement groups
E.policy rules

正解:

Question No : 2
What is a function of the Juniper Identity Management Service?

A.encrypting user e-mail
B.logging malicious code sent through ingress and egress ports
C.encrypting network data traffic
D.maintaining a centralized authentication table

正解:

Question No : 3
When creating an IPsec tunnel, which type of encryption uses public and private keys?

A.symmetric encryption
B.asymmetric encryption
C.DES encryption
D.AES encryption

正解:

Question No : 4
You are asked to onboard an SRX Series device to Junos Space Security Director, but it is not working.
In this scenario, what are three areas that should be reviewed? (Choose three.)

A.chassis serial number
B.SSH port number
C.active security policies
D.authentication credentials
E.IP address

正解:

Question No : 5
You want to use user identity information to secure your network.
Which two actions must you perform on your SRX Series Firewall to accomplish this task? (Choose two.)

A.Create security policies that include user identity configuration
B.Add user accounts to the Active Directory Domain Users group
C.Configure an identity provider on your SRX Series Firewall.
D.Add the user identity feature license to your SRX Series Firewall.

正解:

Question No : 6
You want to configure the SSL proxy feature on your SRX Series Firewall.
Which two actions must you perform to accomplish this task? (Choose two.)

A.Enable the SSL AL
B.Create an SSL proxy profile.
C.Create an SSL application object.
D.Associate an SSL proxy profile with a security policy.

正解:

Question No : 7
Which three actions does Junos Space Security Director perform during the device discovery process? (Choose three.)

A.It imports the device’s active device configuration.
B.it reboots the device.
C.It imports device status information.
D.It adds a local superuser account to the device configuration.
E.It connects to the device using SS

正解:

Question No : 8
Referring to the exhibit, which two statements are correct? (Choose two.)

A.IP address 192.168.1.10 is the SRX Series device.
B.IP address 192.168.1.10 is the primary JIMS server.
C.The JIMS server to the domain controller connection is online.
D.The SRX Series device to the JIMS connection is online.

正解:

Question No : 9
You are configuring a redundancy group using Ethernet interfaces.
In this scenario, which two actions must be performed? (Choose two.)

A.Assign a physical interface from each node to the reth0 interface.
B.Set the retry interval
C.Define the number of reth interfaces in a cluster under the chassis cluster hierarchy.
D.Configure the heartbeat interval.

正解:

Question No : 10
You need to set up a forward proxy on your SRX Series device.
In this scenario, which two statements are correct? (Choose two.)

A.The forward proxy uses the managed SRX as a trusted certificate authority (CA).
B.The forward proxy forwards the server certificate.
C.The forward proxy looks like a client to the servers to which it communicates.
D.The forward proxy uses Encrypted Traffic Insights to monitor traffic.

正解:

Question No : 11
You are asked to set up SSL proxy in SRX Series devices. An SSL proxy profile is already defined for you.
Which two steps are required to complete the setup? (Choose two.)

A.Enable host-inbound-traffic HTTPS in the security zone in which SSL proxy is referenced.
B.Reference the SSL proxy profile in a security zone.
C.Reference the SSL proxy profile in a security policy.
D.Enable any Layer 7 services in the security policy in which SSL proxy is referenced.

正解:

Question No : 12
Your manager asks you to update your SRX Series device’s IDP security package. You perform the required steps; however, when you attempt to install the package, you receive an error.

Referring to the exhibit, which two statements are correct about this error? (Choose two.)

A.IDP stops inspecting traffic.
B.The IDP license has expired.
C.IDP continues to inspect traffic only using the installed signatures.
D.The IDP license is missing (not installed).

正解:

Question No : 13
You are asked to ensure that traffic that matches an IDP policy is not impacted until administrators have a chance to evaluate it. In this scenario, which IP action should be configured for the policy?

A.ip-block
B.ip-notify
C.ip-connection-rate-limit
D.ip-close

正解:

Question No : 14
Which two statements are correct about client-protection Secure Socket Layer (SSL) proxy configurations? (Choose two.)

A.Server certificate is required.
B.Root certificate authority (CA) configuration is required.
C.Root certificate authority (CA) configuration is not required.
D.Server certificate is not required.

正解:

Question No : 15
An administrator decides to designate a node as the primary node for the chassis cluster.
Which statement is correct in this scenario?

A.Configure the burnt-in-address (BIA) to the highest value to bring the node as the primary node.
B.The node with the highest priority will become a primary node.
C.The node with the lowest priority will become a primary node.
D.Nodes with a priority of one are ineligible to participate in the election process.

正解:

Juniper JN0-336 問題練習