Free JN0-335 Braindumps Download Updated on Mar 02, 2025 with 200 Questions [Q107-Q124] : Top Exam Collection : http://blog.topexamcollection.com

質問107
出展ボタンをクリックします。

Which two statements are true about the session shown in the exhibit? (Choose two.)

Two security policies are required for bidirectional traffic flow.

The ALG was enabled by manual configuration.

The ALG was enabled by default.

One security policy is required for bidirectional traffic flow.

質問108
What is the default timeout period for a TCP session in the session table of a Junos security device?

1分

60分

15分

30分

質問109
Which two statements describe how rules are used with Juniper Secure Analytics? (Choose two.)

When a rule is triggered, JSA can respond by sending an e-mail to JSA administrators.

Rules are defined on Junos Space Security Director, and then pushed to JSA log collectors.

A rule defines matching criteria and actions that should be taken when an events matches the rule.

When a rule is triggered, JSA can respond by blocking all traffic from a specific source address.

質問110
出展ボタンをクリックします。

The output shown in the exhibit is displayed in which format?

syslog

sd-syslog

binary

WELF

質問111
Your JIMS server is unable to view event logs.
Which two actions would you take to solve this issue? (Choose two.)

Enable the correct host-inbound-traffic rules on the SRX Series devices.

Enable remote event log management within Windows Firewall on the necessary Exchange servers.

Enable remote event log management within Windows Firewall on the necessary domain controllers.

Enable remote event log management within Windows Firewall on the JIMS server.

質問112
Which two statements about the DNS ALG are correct? (Choose two.)

The DNS ALG supports DDNS.

The DNS ALG supports VPN tunnels.

The DNS ALG performs DNS doctoring.

The DNS ALG does not support NAT.

質問113
When a security policy is modified, which statement is correct about the default behavior for active sessions allowed by that policy?

The active sessions allowed by the policy will be dropped.

Only policy changes that involve modification of the action field will cause the active sessions affected by the change to be dropped.

Only policy changes that involve modification of the application will cause the active sessions affected by the change to be dropped.

The active sessions allowed by the policy will continue unchanged.

質問114
Referring to the exhibit which statement is true?

SSL proxy functions will ignore the session.

SSL proxy leverages post-match results.

SSL proxy must wait for return traffic for the final match to occur.

SSL proxy leverages pre-match result

質問115
The output shown in the exhibit is displayed in which format?

syslog

sd-syslog

binary

WELF

質問116
You are experiencing excessive packet loss on one of your two WAN links route traffic from the degraded link to the working link Which AppSecure component would you use to accomplish this task?

AppFW

AppQoE

AppQoS

APBR

質問117
What are two examples of RTOs? (Choose two.)

IPsec SA entries

session table entries

fabric link probes

control link heartbeats

質問118
Which two statements about SRX chassis clustering are correct? (Choose two.)

SRX chassis clustering supports active/passive and active/active for the data plane.

SRX chassis clustering only supports active/passive for the data plane.

SRX chassis clustering supports active/passive for the control plane.

SRX chassis clustering supports active/active for the control plane.

質問119
You are asked to create an IPS-exempt rule base to eliminate false positives from happening.
Which two configuration parameters are available to exclude traffic from being examined?
(2つ選んでください)

source port

source IP address

destination IP address

destination port

質問120
出展ボタンをクリックします。

The output shown in the exhibit is displayed in which format?

syslog

WELF

binary

sd-syslog

質問121
Referring to the exhibit, which statement is true?

Hosts are always able to communicate through the SRX Series device no matter the threat score assigned to them on the infected host feed.

Hosts are unable to communicate through the SRX Series device after being placed on the infected host feed with a high enough threat score.

Malicious HTTP file downloads are never blocked.

Malicious HTTP file downloads are always blocked.

質問122
Your network uses a remote e-mail server that is used to send and receive e-mails for your users.
In this scenario, what should you do to protect users from receiving malicious files thorugh e-mail?

Deploy Sky ATP IMAP e-mail protection

Deploy Sky ATP MAPI e-mail protection

Deploy Sky ATP SMTP e-mail protection

Deploy Sky ATP POP3 e-mail protection

質問123
Which statement describes the AppTrack module in AppSecure?

The AppTrack module provides enforcement with the ability to block traffic, based on specific applications.

The AppTrack module provides control by the routing of traffic, based on the application.

The AppTrack module identifies the applications that are present in network traffic.

The AppTrack module provides visibility and volumetric reporting of application usage on the network.

QUESTION 124
What are two types of system logs that Junos generates? (Choose two.)

SQL log files

data plane logs

system core dump files

control plane logs