JN0-334試験無料問題集（93題）「Juniper Security, Specialist (JNCIS-SEC) 認定」

出題：1

Which default protocol and port are used for JIMS to SRX client communication?

A. RPC over TCP, port 135

B. ADSI over TCP; port 389

C. HTTPS over TCP: port 443

D. WMI over TCP; port 389

正解：C 解答を投票する

出題：2

When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)

A. A security policy can reference both a client-protection SSL proxy profile and a server-protection proxy profile.

B. If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is not decrypted.

C. A security policy can only reference a client-protection SSL proxy profile or a server-protection SSL proxy profile.

D. If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is decrypted.
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-ssl-proxy.html

正解：B,C 解答を投票する

出題：3

Which statement about the control link in a chassis cluster is correct?

A. The control messages sent over the link are encrypted by default.

B. The control link heartbeats contain the configuration file of the nodes.

C. Recovering from a control link failure requires a reboot.

D. A cluster can have redundant control links.

正解：D 解答を投票する

出題：4

A routing change occurs on an SRX Series device that involves choosing a new egress interface.
In this scenario, which statement is true for all affected current sessions?

A. The current session are torn dowm only if the policy-rematch option has been enabled.

B. The current sessions do not change.

C. The current sessions are torn down and go through first path processing based on the new route.

D. The current sessions might change based on the corresponding security policy.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which two settings must be enabled on the hypervisor in a vSRX deployment to ensure proper chassis cluster operation? (Choose two.)

A. Fabric links must have an MTU of 9000.

B. Fabric links must operate in promiscuous mode.

C. Control links must operate in promiscuous mode.

D. Control links must have an MTU of 9000.

正解：A,C 解答を投票する

出題：6

The DNS ALG performs which three functions? (Choose three.)

A. The DNS ALG performs the IPv4 and IPV6 address transformations.

B. The DNS ALG performs DNS doctoring.

C. The DNS ALG performs DNS load balancing.

D. The DNS ALG performs DNSSEC.

E. The DNS ALG modifies the DNS payload in NAT mode.

正解：A,B,E 解答を投票する

出題：7

You must ensure that all encrypted traffic passing through your SRX device uses strong protocols and ciphers.
Which feature should you implement to satisfy this requirement?

A. AppSecure

B. JIMS

C. JATP

D. SSL proxy

正解：D 解答を投票する

出題：8

What are two examples of RTOs? (Choose two.)

A. session table entries

B. IPsec SA entries

C. control link heartbeats

D. fabric link probes

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

What is the maximum number of supported interfaces on a vSRX hosted in a VMware environment?

A. 4

B. 12

C. 3

D. 10

正解：D 解答を投票する

出題：10

Which three statements are true about the difference between cSRX-based virtual security deployments and vSRX-based virtual security deployments? (Choose three.)

A. cSRX-based solutions are more scalable than vSRX-based solutions.

B. vSRX provides Layer 2 to Layer 7 secure services and cSRX provides Layer 4 to Layer 7 secure services.

C. cSRX requires less storage and memory space for a given deployment than vSRX-based solutions.

D. vSRX and cSRX both provide Layer 2 to Layer 7 secure services.

E. vSRX provides faster deployment time and faster reboots compared to cSRX.

正解：A,B,C 解答を投票する

JN0-334試験無料問題集「Juniper Security, Specialist (JNCIS-SEC) 認定」