JN0-336

Review 28 JN0-336 practice questions with answer explanations and community insights.

Question 1

In Juniper high availability (HA) SRX Series device implementations, which interface will be used to exchange session state, configuration files, and ensure session continuity across nodes using the proprietary Trivial Network Protocol?

  1. fab
  2. fxp0
  3. fxp1
  4. swfab

Question 2

What are three policy types available in Junos Space Security Director? (Choose three.)

  1. device
  2. local
  3. group
  4. universal
  5. global

Question 3

You need to secure communications from a mobile command center which uses a 5G mobile ISP behind CGNAT to an SRX Series Firewall at headquarters. Which two actions should be performed on the SRX Series Firewall in this scenario? (Choose two.)

  1. Configure the IPsec VPN to use NAT-T.
  2. Configure the IPsec VPN to use IKEv1 aggressive mode.
  3. Configure the IPsec VPN to use IKEv2 aggressive mode.
  4. Configure the IPsec VPN to use DPD.

Question 4

Which two statements are correct about client-protection Secure Socket Layer (SSL) proxy configurations? (Choose two.)

  1. Server certificate is required.
  2. Root certificate authority (CA) configuration is required.
  3. Root certificate authority (CA) configuration is not required.
  4. Server certificate is not required.

Question 5

Your manager asks you to update your SRX Series device’s IDP security package. You perform the required steps; however, when you attempt to install the package, you receive an error. Referring to the exhibit, which two statements are correct about this error? (Choose two.)

  1. IDP stops inspecting traffic.
  2. The IDP license has expired.
  3. IDP continues to inspect traffic only using the installed signatures.
  4. The IDP license is missing (not installed).
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.