JN0-336問題集、Juniper実際の試験問題

質問 1

Which two services would an SRX Series device use to connect to an LDAP server for identity-aware security policies? (Choose two.)

A. RADIUS

B. Active Directory

C. TACACS+

D. JIMS

正解: B,D

質問 2

Referring to the exhibit, which two statements are correct? (Choose two.)

A. IP address 192.168.1.10 is the SRX Series device.

B. IP address 192.168.1.10 is the primary JIMS server.

C. The SRX Series device to the JIMS connection is online.

D. The JIMS server to the domain controller connection is online.

正解: B,C

解説: (PassTest メンバーにのみ表示されます)

質問 3

Using Junos Space Security Director, you want to configure a unique firewall policy for a specific SRX Series device.
Which firewall policy rules would satisfy the requirement?

A. all devices policy postrules

B. group policy prerules

C. all devices policy prerules

D. device policy rules

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 4

You are asked to configure a cluster between SRX1 and SRX2.
Which two commands must be used to accomplish this task? (Choose two.)

A. user@SRX1 > set chassis cluster cluster-id 1 node 0

B. user@SRX1# set chassis cluster cluster-id 0 node 2

C. user@SRX2 > set chassis cluster cluster-id 1 node 1

D. user@SRX2# set chassis cluster cluster-id 0 node 1

正解: A,C

解説: (PassTest メンバーにのみ表示されます)

質問 5

Which two statements about proxy IDs are correct? (Choose two.)

A. Proxy IDs are created during IKE Phase 1.

B. Proxy IDs cannot override default Junos behavior.

C. Proxy IDs must match on both peers for a Phase 2 tunnel to establish.

D. By default, for a route-based IPsec VPN, a Junos security device sets the proxy ID to 0.0.0.0/0.

正解: C,D

解説: (PassTest メンバーにのみ表示されます)

質問 6

Which SRX Series device configuration setting must be configured first to use Juniper ATP Cloud?

A. Start up the anti-malware service on the SRX Series device.

B. Enable connectivity between the SRX Series device and Juniper ATP Cloud.

C. Apply the firewall rules on the SRX Series device.

D. Configure the anti-malware policies on the SRX Series device.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 7

You are asked to set up SSL proxy in SRX Series devices. An SSL proxy profile is already defined for you.
Which two steps are required to complete the setup? (Choose two.)

A. Enable any Layer 7 services in the security policy in which SSL proxy is referenced.

B. Enable host-inbound-traffic HTTPS in the security zone in which SSL proxy is referenced.

C. Reference the SSL proxy profile in a security zone.

D. Reference the SSL proxy profile in a security policy.

正解: A,D

Juniper Security, Specialist (JNCIS-SEC) - JN0-336 模擬練習