最新的Juniper JN0-336免費考試真題

問題1

What are two types of attack objects included in an IDP attack object database? (Choose two.)

A. protocol anomaly-based

B. vector-based

C. signature-based

D. statistic-based

正確答案: A,C

說明：（僅 Fast2test 成員可見）

問題2

Using Junos Space Security Director, you want to configure a unique firewall policy for a specific SRX Series device.
Which firewall policy rule would satisfy the requirement?

A. all devices policy prerules

B. group policy prerules

C. all devices policy postrules

D. device policy rules

正確答案: D

說明：（僅 Fast2test 成員可見）

問題3

You have configured a new site-to-site VPN tunnel. The exhibit shows the security IPsec statistics output for the specific tunnel index from one of the tunnel-end devices.

Which two statements are correct in this scenario? (Choose two.)

A. No traffic passes through this tunnel.

B. AH is incorrectly configured.

C. The ESP configuration is not set up correctly.

D. The far-end tunnel device is rebooting.

正確答案: A,C

說明：（僅 Fast2test 成員可見）

問題4

Which two statements are correct about Juniper Secure Connect? (Choose two.)

A. Juniper Secure Connect uses a route-based VPN.

B. Juniper Secure Connect can use a self-signed certificate.

C. Juniper Secure Connect cannot use a self-signed certificate.

D. Juniper Secure Connect uses a policy-based VPN.

正確答案: A,B

說明：（僅 Fast2test 成員可見）

問題5

Which statement is correct about Active Directory as an identity source for identity-aware security policies?

A. It supports 20 Active Directory servers per domain.

B. It supports logical systems.

C. It tracks non-Windows Active Directory users.

D. It supports a maximum of two domains.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題6

A pair of branch SRX Series devices are booted up in cluster mode.

Referring to the exhibit, which statement is correct?

A. the devices are not running the same version of Junos.

B. node1 is running a " factory-default config " .

C. fxp0 or fxp1 on either device has an existing configuration.

D. the devices are not the same hardware.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題7

You want to include a custom attack object named Custom-FTP-Attack and set the action to drop the packet.

Referring to the exhibit, which modifications would you make?

A. Add custom-attack Custom-FTP-Attack to the notification section and change the action to drop-packet.

B. Add custom-attack Custom-FTP-Attack to the attacks section and change the action to close-client.

C. Add custom-attack Custom-FTP-Attack to the action section and change the action to drop-packet.

D. Add custom-attack Custom-FTP-Attack to the attacks section and change the action to drop-packet.

正確答案: D

說明：（僅 Fast2test 成員可見）

最新的Juniper Security, Specialist (JNCIS-SEC) - JN0-336免費考試真題

聯系我們

站內鏈接

最新更新