JN0-335 Exam Questions and Answers | Exam-Dumps (Page: 3)

QUESTION: 11

When a security policy is deleted, which statement is correct about the default behavior of active sessions allowed by that policy?

The active sessions allowed by the policy will be dropped.
The active sessions allowed by the policy will be marked as a legacy flow and will continue to be forwarded.
The active sessions allowed by the policy will be reevaluated by the cached
The active sessions allowed by the policy will continue

Answer(s): A

Explanation:

When a security policy is deleted, the active sessions allowed by the policy will be dropped. The default behavior is that all active sessions allowed by the policy will be terminated and the traffic will no longer be forwarded. There is no way to mark the active sessions as a legacy flow or to reevaluate them by the cached rules.

Reference:

Juniper Networks Security, Specialist (JNCIS-SEC) Study Guide, Chapter 3: Security Policies, page 3-9.
According to Juniper Networks Security, Specialist (JNCIS-SEC) Study Guide, when a security policy is deleted, the active sessions allowed by that policy will be dropped. This behavior is the default behavior of the device. There is no way to mark the active sessions as a legacy flow or to re-evaluate them against cached rules. The device will terminate the active sessions and will no longer forward traffic for those sessions.

Reveal Solution Next Question

QUESTION: 12

You are asked to determine how much traffic a popular gaming application is generating on your network.
Which action will you perform to accomplish this task?

Enable AppQoS on the proper security zones
Enable APBR on the proper security zones
Enable screen options on the proper security zones
Enable AppTrack on the proper security zones.

Answer(s): D

Explanation:

AppTrack is a feature of Juniper Networks firewall solutions that allows administrators to track applications, users, and the amount of traffic generated by those applications on the network. AppTrack can be enabled on specific security zones of the network to monitor traffic on those zones. This feature can be used to determine how much traffic a popular gaming application is generating on the network. For more information, please refer to the Juniper Networks JNCIS-SEC Study Guide.

Reference:

Juniper Networks Security, Specialist (JNCIS-SEC) Study Guide, Chapter 4: AppSecure, page 4-15.
AppTrack is a feature of the Junos OS that provides visibility into the applications and users on your network. It tracks the usage of applications and provides detailed reports on the amount of traffic generated by each application. By enabling AppTrack on the proper security zones, you can determine how much traffic a popular gaming application is generating on your network.

Reveal Solution Next Question

QUESTION: 13

How does the SSL proxy detect if encryption is being used?

It uses application identity services.
It verifies the length of the packet
It queries the client device.
It looks at the destination port number.

Answer(s): D

Explanation:

The SSL proxy can detect if encryption is being used by looking at the destination port number of the packet. If the port number is 443, then the proxy can assume that the packet is being sent over an encrypted connection. If the port number is different, then the proxy can assume that the packet is not encrypted. For more information, please refer to the Juniper Networks JNCIS-SEC Study Guide.

Reference:

Juniper Networks Security, Specialist (JNCIS-SEC) Study Guide, Chapter 6: SSL Proxy, page 6-9.
The SSL proxy is a security feature that provides visibility and control over SSL/TLS encrypted traffic.
When SSL proxy is enabled, it intercepts SSL/TLS traffic and decrypts it to allow visibility into the content of the encrypted traffic. However, before decrypting the traffic, the SSL proxy must first determine if the traffic is encrypted.
To detect if encryption is being used, the SSL proxy looks at the destination port number. If the destination port number is a known SSL/TLS port (e.g., TCP port 443), the SSL proxy assumes that encryption is being used and intercepts the traffic. If the destination port is not a known SSL/TLS port, the SSL proxy does not intercept the traffic and allows it to pass through the device unmodified.

Reveal Solution Next Question

QUESTION: 14

Which two statements are correct when considering IPS rule base evaluation? (Choose two.)

IPS evaluates rules concurrently.
IPS applies the most severe action to traffic matching multiple rules,
IPS evaluates rules sequentially
IPS applies the least severe action to traffic matching multiple rules.

Answer(s): A,B

Reference:

Juniper Networks Security, Specialist (JNCIS-SEC) Study Guide, Chapter 7: Intrusion Prevention System, page 7-5.
The Intrusion Prevention System (IPS) is a feature that provides protection against network-based threats. The IPS uses a rule base to evaluate network traffic and apply actions based on the rules that match the traffic.
When evaluating the rule base, the IPS evaluates the rules concurrently (option A). This means that the IPS can apply multiple rules to the same traffic simultaneously. If multiple rules match the same traffic, the IPS applies the most severe action (option B). This means that if there are conflicting actions specified in different rules, the IPS will apply the action that has the highest severity. For example, if one rule specifies a "drop" action and another rule specifies a "log" action for the same traffic, the IPS will drop the traffic because dropping has a higher severity than logging.

Reveal Solution Next Question

QUESTION: 15

You have implemented a vSRX in your VMware environment. You want to implement a second vSRX Series device and enable chassis clustering.
Which two statements are correct in this scenario about the control-link settings? (Choose two.)

In the vSwitch security settings, accept promiscuous mode.
In the vSwitch properties settings, set the VLAN ID to None.
In the vSwitch security settings, reject forged transmits.
In the vSwitch security settings, reject MAC address changes.

Answer(s): C,D

Reveal Solution Next Question

Juniper JN0-335 Exam (page: 3) Juniper Security, Specialist (JNCIS-SEC) Updated on: 12-Feb-2026

QUESTION: 11

Explanation:

Reference:

QUESTION: 12

Explanation:

Reference:

QUESTION: 13

Explanation:

Reference:

QUESTION: 14

Reference:

QUESTION: 15

Juniper JN0-335 Exam (page: 3)
Juniper Security, Specialist (JNCIS-SEC)
Updated on: 12-Feb-2026