최신Juniper Security, Specialist (JNCIS-SEC) - JN0-335무료샘플문제

A. AppTrack collects traffic flow information including byte, packet, and duration statistics.

B. AppTrack identifies and blocks traffic flows that might be malicious regardless of the ports being used.

C. AppTrack can only be configured in the main logical system on an SRX Series device.

D. AppTrack can be configured for any defined logical system on an SRX Series device.

A. Group membership does not automatically change when Juniper updates the IPS signature database.

B. Matching attack objects are automatically added to a custom group.

C. You must manually add matching attack objects to a custom group.

D. Group membership automatically changes when Juniper updates the IPS signature database.

A. The DNS ALG does not support NAT.

B. The DNS ALG performs DNS doctoring.

C. The DNS ALG supports VPN tunnels.

D. The DNS ALG supports DDNS.

A. Use the CLI to create a custom profile and increase the scan limit.

B. Use the CLI to change the default profile to increase the scan limit for all files to 30 MB.

C. Use the ATP Cloud Ul to change the default profile to increase the scan limit for all files to 30 MB.

D. Use the ATP Cloud Ul to update a custom profile and increase the scan limit for executable files to 30 MB.

A. the irb interface on QFX-2

B. the interface of QFX-1 that connects to User-1

C. the interface on SRX-1 that connects to QFX-2

D. the irb interface on QFX-1

A. Import the existing certificate to each client device.

B. Reboot the SRX Series device.

C. Install a new SRX Series device to act as the client proxy.

D. Load a known good, but expired, CA certificate onto the SRX Series device.

A. Enable screen options on the proper security zones

B. Enable APBR on the proper security zones

C. Enable AppQoS on the proper security zones

D. Enable AppTrack on the proper security zones.

A. ALGs

B. JIMS

C. SSL proxy

D. IPS

A. Only use cloud-based Sky ATP file blacklists.

B. Only use cloud-based Sky ATP file hash lookups.

C. Only use on-premises local Sky ATP server anti-malware file scanning.

D. Only use on-box SRX anti-malware file scanning.

A. JIMS

B. UTM

C. Encrypted Traffic Insights

D. Adaptive Threat Profiling

A. A policy scheduler can be defined using a daily schedule.

B. A policy scheduler can be dynamically activated based on traffic flow volumes.

C. A policy scheduler determines the time frame that a security policy is actively evaluated.

D. A policy scheduler can only be applied when using the policy-rematch feature.

A. The syslog is configured for a user facility.

B. The log is being sent to a remote server.

C. The syslog is configured for an info facility.

D. The log is being stored on the local Routing Engine.

A. Microsoft Active Directory server event logs

B. Microsoft Windows Server 2012 audit logs

C. Microsoft Exchange Server event logs

D. Microsoft Active Directory audit logs

A. SRX chassis clustering supports active/active for the control plane.

B. SRX chassis clustering supports active/passive and active/active for the data plane.

C. SRX chassis clustering supports active/passive for the control plane.

D. SRX chassis clustering only supports active/passive for the data plane.

A. The active sessions allowed by the policy will be marked as a legacy flow and will continue to be forwarded.

B. The active sessions allowed by the policy will be dropped.

C. The active sessions allowed by the policy will be reevaluated by the cached

D. The active sessions allowed by the policy will continue