Juniper JN0-335 - Security, Specialist (JNCIS-SEC) Exam
Page: 3 / 21
Total 103 questions
Question #11 (Topic: Exam A)
When a security policy is deleted, which statement is correct about the default behavior for active sessions allowed by that policy?
A. The active sessions allowed by the policy will be dropped.
B. The active sessions allowed by the policy will be marked as a legacy flow and will continue to be forwarded.
C. The active sessions allowed by the policy will be reevaluated by the cached policy rules.
D. The active sessions allowed by the policy will continue unchanged.
Answer: A
Question #12 (Topic: Exam A)
You are asked to determine how much traffic a popular gaming application is generating on your network.
Which action will you perform to accomplish this task?
Which action will you perform to accomplish this task?
A. Enable AppQoS on the proper security zones.
B. Enable APBR on the proper security zones.
C. Enable screen options on the proper security zones.
D. Enable AppTrack on the proper security zones.
Answer: D
Question #13 (Topic: Exam A)
How does the SSL proxy detect if encryption is being used?
A. It uses application identity services.
B. It verifies the length of the packet.
C. It queries the client device.
D. It looks at the destination port number.
Answer: A
Question #14 (Topic: Exam A)
Which two statements are correct when considering IPS rule base evaluation? (Choose two.)
A. IPS evaluates rules concurrently.
B. IPS applies the most severe action to traffic matching multiple rules.
C. IPS evaluates rules sequentially.
D. IPS applies the least severe action to traffic matching multiple rules.
Answer: BC
Question #15 (Topic: Exam A)
You have implemented a vSRX in your VMware environment. You want to implement a second vSRX Series device and enable chassis clustering.
Which two statements are correct in this scenario about the control-link settings. (Choose two.)
Which two statements are correct in this scenario about the control-link settings. (Choose two.)
A. In the vSwitch security settings, accept promiscuous mode.
B. In the vSwitch properties settings, set the VLAN ID to None.
C. In the vSwitch security settings, reject forged transmits.
D. In the vSwitch security settings, reject MAC address changes.
Answer: AB
