Juniper JN0-335 Exam (page: 1)
Juniper Security, Specialist (JNCIS-SEC)
Updated on: 12-Feb-2026

Viewing Page 1 of 21

Regarding static attack object groups, which two statements are true? (Choose two.)

  1. Matching attack objects are automatically added to a custom group.
  2. Group membership automatically changes when Juniper updates the IPS signature database.
  3. Group membership does not automatically change when Juniper updates the IPS signature database.
  4. You must manually add matching attack objects to a custom group.

Answer(s): B,C

Explanation:

static attack object groups are predefined groups of attack objects that are included in Juniper's IPS signature database. These groups do not change automatically when Juniper updates the database.



You are deploying a new SRX Series device and you need to log denied traffic. In this scenario, which two policy parameters are required to accomplish this task? (Choose two.)

  1. session-init
  2. session-close
  3. deny
  4. count

Answer(s): B,C

Explanation:

you need to create a global firewall rulebase that matches RT_FLOW_SESSION_DENY events. To do this, you need to specify two policy parameters: deny and session-close.



You are asked to reduce the load that the JIMS server places on your Which action should you take in this situation?

  1. Connect JIMS to the RADIUS server
  2. Connect JIMS to the domain Exchange server
  3. Connect JIMS to the domain SQL server.
  4. Connect JIMS to another SRX Series device.

Answer(s): D

Explanation:

JIMS server is a Juniper Identity Management Service that collects user identity information from different authentication sources for SRX Series devices. It can connect to SRX Series devices and CSO platform in your network.

JIMS server is a service that protects corporate resources by authenticating and restricting user access based on roles. It connects to SRX Series devices and CSO platform to provide identity information for firewall policies. To reduce the load that JIMS server places on your network, you should connect JIMS to another SRX Series device. This way, you can distribute the identity information among multiple SRX Series devices and reduce network traffic.



Which two statements about unified security policies are correct? (Choose two.)

  1. Unified security policies require an advanced feature license.
  2. Unified security policies are evaluated after global security policies.
  3. Traffic can initially match multiple unified security policies.
  4. APPID results are used to determine the final security policy

Answer(s): C,D

Explanation:

unified security policies are security policies that enable you to use dynamic applications as match conditions along with existing 5-tuple or 6-tuple matching conditions. They simplify application- based security policy management at Layer 7 and provide greater control and extensibility to manage dynamic applications traffic3



Exhibit



Referring to the exhibit, which two statements describe the type of proxy used? (Choose two.)

  1. forward proxy
  2. client protection proxy
  3. server protection proxy
  4. reverse proxy

Answer(s): B,C

Explanation:

B) Client protection proxy: This statement is correct because a forward proxy can also be called a client protection proxy since it protects the user's identity and computer information from the web server.
C) Server protection proxy: This statement is correct because a reverse proxy can also be called a server protection proxy since it protects the web server's identity and location from the user.



Viewing Page 1 of 21



Share your comments for Juniper JN0-335 exam with other users:

Phil 12/8/2022 11:16:00 PM

i have a lot of experience but what comes in the exam is totally different from the practical day to day tasks. so i thought i would rather rely on these brain dumps rather failing the exam.
GERMANY


BV 6/8/2023 4:35:00 AM

good questions
NETHERLANDS


krishna 12/19/2023 2:05:00 AM

valied exam dumps. they were very helpful and i got a pretty good score. i am very grateful for this service and exam questions
Anonymous


Pie 9/3/2023 4:56:00 AM

will it help?
INDIA


Lucio 10/6/2023 1:45:00 PM

very useful to verify knowledge before exam
POLAND


Ajay 5/17/2023 4:54:00 AM

good stuffs
Anonymous


TestPD1 8/10/2023 12:19:00 PM

question 17 : responses arent b and c ?
EUROPEAN UNION


Nhlanhla 12/13/2023 5:26:00 AM

just passed the exam on my first try using these dumps.
Anonymous


Rizwan 1/6/2024 2:18:00 AM

very helpful
INDIA


Yady 5/24/2023 10:40:00 PM

these questions look good.
SINGAPORE


Kettie 10/12/2023 1:18:00 AM

this is very helpful content
Anonymous


SB 7/21/2023 3:18:00 AM

please provide the dumps
UNITED STATES


David 8/2/2023 8:20:00 AM

it is amazing
Anonymous


User 8/3/2023 3:32:00 AM

quesion 178 about "a banking system that predicts whether a loan will be repaid is an example of the" the answer is classification. not regresion, you should fix it.
EUROPEAN UNION


quen 7/26/2023 10:39:00 AM

please upload apache spark dumps
Anonymous


Erineo 11/2/2023 5:34:00 PM

q14 is b&c to reduce you will switch off mail for every single alert and you will switch on daily digest to get a mail once per day, you might even skip the empty digest mail but i see this as a part of the daily digest adjustment
Anonymous


Paul 10/21/2023 8:25:00 AM

i think it is good question
Anonymous


Unknown 8/15/2023 5:09:00 AM

good for students who wish to give certification.
INDIA


Ch 11/20/2023 10:56:00 PM

is there a google drive link to the images? the links in questions are not working.
AUSTRALIA


Joey 5/16/2023 5:25:00 AM

very promising, looks great, so much wow!
Anonymous


alaska 10/24/2023 5:48:00 AM

i scored 87% on the az-204 exam. thanks! i always trust
GERMANY


nnn 7/9/2023 11:09:00 PM

good need more
Anonymous


User-sfdc 12/29/2023 7:21:00 AM

sample questions seems good
Anonymous


Tamer dam 8/4/2023 10:21:00 AM

huawei is ok
UNITED STATES


YK 12/11/2023 1:10:00 AM

good one nice
JAPAN


de 8/28/2023 2:38:00 AM

please continue
GERMANY


DMZ 6/25/2023 11:56:00 PM

this exam dumps just did the job. i donot want to ruffle your feathers but your exam dumps and mock test engine is amazing.
UNITED KINGDOM


Jose 8/30/2023 6:14:00 AM

nice questions
PORTUGAL


Tar01 7/24/2023 7:07:00 PM

the explanation are really helpful
Anonymous


DaveG 12/15/2023 4:50:00 PM

just passed my exam yesterday on my first attempt. these dumps were extremely helpful in passing first time. the questions were very, very similar to these questions!
Anonymous


A.K. 6/30/2023 6:34:00 AM

cosmos db is paas not saas
Anonymous


S Roychowdhury 6/26/2023 5:27:00 PM

what is the percentage of common questions in gcp exam compared to 197 dump questions? are they 100% matching with real gcp exam?
Anonymous


Bella 7/22/2023 2:05:00 AM

not able to see questions
Anonymous


Scott 9/8/2023 7:19:00 AM

by far one of the best sites for free questions. i have pass 2 exams with the help of this website.
CANADA