Juniper JN0-334 Exam Questions
Security, Specialist (Page 3 )

Updated On: 16-Feb-2026

Which statement is true about high availability (HA) chassis clusters for the SRX Series device?

  1. Cluster nodes require an upgrade to HA compliant Routing Engines.
  2. Cluster nodes must be connected through a Layer 2 switch.
  3. There can be active/passive or active/active clusters.
  4. HA clusters must use NAT to prevent overlapping subnets between the nodes.

Answer(s): C



What are two types of attack objects used by IPS on SRX Series devices? (Choose two.)

  1. protocol anomaly-based attacks
  2. spam-based attacks
  3. signature-based attacks
  4. DDoS-based attacks

Answer(s): A,C



When considering managed sessions, which configuration parameter determines how full the session table must be to implement the early age-out function? (Choose two.)

  1. session service timeout
  2. high waremark
  3. low watermark
  4. policy rematch

Answer(s): A,B



You are asked to improve resiliency for individual redundancy groups in an SRX4600 chassis cluster. Which two features would accomplish this task? (Choose two.)

  1. IP address monitoring
  2. control link recovery
  3. interface monitoring
  4. dual fabric links

Answer(s): B,D



What are two elements of a custom IDP/IPS attack object? (Choose two.)

  1. the attack signature
  2. the severity of the attack
  3. the destination zone
  4. the exempt rulebase

Answer(s): A,B






Post your Comments and Discuss Juniper JN0-334 exam dumps with other Community members:

Join the JN0-334 Discussion