QUESTION: 17

Exhibit

Using the information from the exhibit, which statement is correct?

Redundancy group 1 is in an ineligible state.
Node1 is the active node for the control plane
There are no issues with the cluster.
Redundancy group 0 is in an ineligible state.

Answer(s): A

QUESTION: 18

You want to manually failover the primary Routing Engine in an SRX Series high availability cluster pair.

Which step is necessary to accomplish this task?

Issue the set chassis cluster disable reboot command on the primary node.
Implement the control link recover/ solution before adjusting the priorities.
Manually request the failover and identify the secondary node
Adjust the priority in the configuration on the secondary node.

Answer(s): A

Explanation:

In order to manually failover the primary Routing Engine in an SRX Series high availability cluster pair, you must issue the command "set chassis cluster disable reboot" on the primary node. This command will disable the cluster and then reboot the primary node, causing the secondary node to take over as the primary node. This is discussed in greater detail in the Juniper Security, Specialist (JNCIS-SEC) Study Guide (page 68).

Reveal Solution Next Question

QUESTION: 19

You want to permit access to an application but block application sub-Which two security policy features provide this capability? (Choose two.)

URL filtering
micro application detection
content filtering
APPID

Answer(s): A,B

Explanation:

The two security policy features that provide the capability to permit access to an application but block its sub-applications are URL filtering and micro application detection. URL filtering allows you to create policies that permit or block access to certain websites or webpages based on URL patterns. Micro application detection is a more sophisticated approach that can identify and block specific applications, even if they are embedded within other applications or websites. According to the Juniper Networks Certified Internet Specialist (JNCIS-SEC) Study Guide [1], "micro application detection is the most accurate way to detect and control applications." Content filtering and APPID are more general approaches and are not as effective in providing the level of granularity needed to block sub-applications.

Reveal Solution Next Question

QUESTION: 20

Which statement regarding Juniper Identity Management Service (JIMS) domain PC probes is true?

JIMS domain PC probes analyze domain controller security event logs at60-mmute intervals by default.
JIMS domain PC probes are triggered if no username to IP address mapping is found in the domain security event log.
JIMS domain PC probes are triggered to map usernames to group membership information.
JIMS domain PC probes are initiated by an SRX Series device to verify authentication table information.

Answer(s): B

Explanation:

Juniper Identity Management Service (JIMS) domain PC probes are used to map usernames to IP addresses in the domain security event log. This allows for the SRX Series device to verify authentication table information, such as group membership. The probes are triggered whenever a username to IP address mapping is not found in the domain security event log. By default, the probes are executed at 60-minute intervals.

Reveal Solution Next Question

Free JN0-335 Exam Braindumps (page: 5)

QUESTION: 17

QUESTION: 18

Explanation:

QUESTION: 19

Explanation:

QUESTION: 20

Explanation: