Free Salesforce Security Specialist Exam JN0-335 Exam Practice Test

Which method does the loT Security feature use to identify traffic sourced from IoT devices?

• The SRX Series device streams metadata from the loT device transit traffic to Juniper ATP Cloud Juniper ATP Cloud.
• The SRX Series device streams transit traffic received from the IoT device to Juniper ATP Cloud.
• The SRX Series device identifies loT devices using their MAC address.
• The SRX Series device identifies loT devices from metadata extracted from their transit traffic.

You are deploying a new SRX Series device and you need to log denied traffic.In this scenario, which two policy parameters are required to accomplish this task? (Choose two.)

• session-init
• session-close
• deny
• count

You enable chassis clustering on two devices and assign a cluster ID and a node ID to each device. In this scenario, what is the correct order for rebooting the devices?

• Reboot the secondary device, then the primary device.
• Reboot only the secondary device since the primary will assign itself the correct cluster and node ID.
• Reboot the primary device, then the secondary device.
• Reboot only the primary device since the secondary will assign itself the correct cluster and node ID.

You are asked to implement IPS on your SRX Series device.In this scenario, which two tasks must be completed before a configuration will work? (Choose two.)

• Download the IPS signature database.
• Enroll the SRX Series device with Juniper ATP Cloud.
• Install the IPS signature database.
• Reboot the SRX Series device.

You want to manually failover the primary Routing Engine in an SRX Series high availability cluster pair.Which step is necessary to accomplish this task?

• Issue the set chassis cluster disable reboot command on the primary node.
• Implement the control link recover/ solution before adjusting the priorities.
• Manually request the failover and identify the secondary node
• Adjust the priority in the configuration on the secondary node.

When a security policy is deleted, which statement is correct about the default behavior of active sessions allowed by that policy?

• The active sessions allowed by the policy will be dropped.
• The active sessions allowed by the policy will be marked as a legacy flow and will continue to be forwarded.
• The active sessions allowed by the policy will be reevaluated by the cached
• The active sessions allowed by the policy will continue

You want to deploy a virtualized SRX in your environment.In this scenario, why would you use a vSRX instead of a cSRX? (Choose two.)

• The vSRX supports Layer 2 and Layer 3 configurations.
• Only the vSRX provides clustering.
• The vSRX has faster boot times.
• Only the vSRX provides NAT, IPS, and UTM services

Which two statements are correct about JSA data collection? (Choose two.)

• The Event Collector collects information using BGP FlowSpec.
• The Flow Collector can use statistical sampling
• The Flow Collector parses logs.
• The Event Collector parses logs

What are three capabilities of AppQoS? (Choose three.)

• re-write DSCP values
• assign a forwarding class
• re-write the TTL
• rate-limit traffic
• reserve bandwidth

How does the SSL proxy detect if encryption is being used?

• It uses application identity services.
• It verifies the length of the packet
• It queries the client device.
• It looks at the destination port number.