Free Juniper JN0-336 Exam Dumps Questions & Answers

How does the SSL proxy service identify SSL traffic?

• A.by examining the URL
• B.by examining the destination port
• C.by using AppID results
• D.by reading the server certificate

Referring to the exhibit, which two statements are correct? (Choose two.)

• A.The JIMS server to the domain controller connection is online.
• B.IP address 192.168.1.10 is the primary JIMS server.
• C.The SRX Series device to the JIMS connection is online.
• D.IP address 192.168.1.10 is the SRX Series device.

How does Juniper's identity-aware firewall facilitate compliance with security policies and regulations?

• A.by simplifying the design of the network architecture
• B.by increasing network capacity to accommodate user requirements
• C.by granting access based on user roles or identities
• D.by enforcing the need for user confidentiality

Which two statements are correct about Juniper Secure Connect? (Choose two.)

• A.Juniper Secure Connect cannot use a self-signed certificate.
• B.Juniper Secure Connect uses a route-based VPN.
• C.Juniper Secure Connect can use a self-signed certificate.
• D.Juniper Secure Connect uses a policy-based VPN.

You work on the security operations team that manages firewalls only. In your data center, there are two SRX chassis clusters. These clusters operate on VLAN 1042. The network team advises you that they see the same MAC address coming from both chassis clusters for reth0.
Why is this occurring?

• A.The same cluster ID was used on both clusters.
• B.Chassis clusters must be on separate VLANs.
• C.RGO is active on both node0 and node1 due to split-brain.
• D.Link Aggregation Control Protocol is not synchronized.