QUESTION: 21

Your manager asks you to provide firewall and NAT services in a private cloud.
Which two solutions will fulfill the minimum requirements for this deployment? (Choose two.)

a single vSRX
a vSRX for firewall services and a separate vSRX for NAT services
a cSRX for firewall services and a separate cSRX for NAT services
a single cSRX

Answer(s): B,C

Explanation:

A single vSRX or cSRX cannot provide both firewall and NAT services simultaneously. To meet the minimum requirements for this deployment, you need to deploy a vSRX for firewall services and a separate vSRX for NAT services (option B), or a cSRX for firewall services and a separate cSRX for NAT services (option C). This is according to the Juniper Networks Certified Security Specialist (JNCIS-SEC) Study Guide.

Reveal Solution Next Question

QUESTION: 22

Which two statements are true about mixing traditional and unified security policies? (Choose two.)

When a packet matches a unified security policy, the evaluation process terminates
Traditional security policies must come before unified security policies
Unified security policies must come before traditional security policies
When a packet matches a traditional security policy, the evaluation process terminates

Answer(s): A,D

Reveal Solution Next Question

QUESTION: 23

Exhibit

Referring to the exhibit, what do you determine about the status of the cluster.

Both nodes determine that they are in a primary state.
Node 1 is down
Node 2 is down.
There are no issues with the cluster.

Answer(s): C

Reveal Solution Next Question

QUESTION: 24

Which two features are configurable on Juniper Secure Analytics (JSA) to ensure that alerts are triggered when matching certain criteria? (Choose two.)

building blocks
assets
events
tests

Answer(s): C,D

Explanation:

The two configurable features on Juniper Secure Analytics (JSA) that can be used to ensure that alerts are triggered when matching certain criteria are events and tests. Events refer to the collection of data from different sources, while tests are used to define the criteria for which an alert is triggered. For example, you can use events to collect data from a firewall and tests to define criteria such as IP address, port number, and the type of traffic. The Security, Specialist (JNCIS-SEC) Study guide provides further information on how to configure these features on JSA.

Reveal Solution Next Question

Free JN0-335 Exam Braindumps (page: 6)

QUESTION: 21

Explanation:

QUESTION: 22

QUESTION: 23

QUESTION: 24

Explanation: