最新のJN0-336問題集で試験を準備する

Juniper JN0-336 試験概要:

Juniper JN0-336 試験シラバストピック:

Juniper Security, Specialist (JNCIS-SEC) 認定 JN0-336 試験問題：

1. You want to include a custom attack object named Custom-FTP-Attack and set the action to drop the packet.

Referring to the exhibit, which modifications would you make?

A) Add custom-attack Custom-FTP-Attack to the notification section and change the action to drop-packet.
B) Add custom-attack Custom-FTP-Attack to the attacks section and change the action to close-client.
C) Add custom-attack Custom-FTP-Attack to the attacks section and change the action to drop-packet.
D) Add custom-attack Custom-FTP-Attack to the action section and change the action to drop-packet.

2. You are configuring a redundancy group using Ethernet interfaces.
In this scenario, which two actions must be performed? (Choose two.)

A) Assign a physical interface from each node to the reth0 interface.
B) Configure the heartbeat interval.
C) Set the retry interval
D) Define the number of reth interfaces in a cluster under the chassis cluster hierarchy.

3. How does the SSL proxy detect if a particular session is SSL encrypted?

A) It uses AppID services.
B) It verifies the length of the packet.
C) It looks at the destination port number.
D) It uses a certificate authority (CA).

4. You are deploying a new SRX Series device and you need to log denied traffic.
In this scenario, which two policy parameters are required to accomplish this task? (Choose two.)

A) count
B) session-init
C) session-close
D) deny

5. You need to deploy an SRX Series device in your virtual environment.
In this scenario, what are two benefits of using a CSRX? (Choose two.)

A) The cSRX supports Layer 2 and Layer 3 deployments.
B) The cSRX has low memory requirements.
C) The cSRX supports firewall, NAT, IPS, and UTM services.
D) The cSRX default configuration contains three default zones: trust, untrust, and management.

質問と回答：