[2026] Juniper Security, Specialist (JNCIS-SEC)

문제1

The DNS ALG performs which three functions? (Choose three.)

A. The DNS ALG performs the IPv4 and IPV6 address transformations.

B. The DNS ALG performs DNS doctoring.

C. The DNS ALG modifies the DNS payload in NAT mode.

D. The DNS ALG performs DNS load balancing.

E. The DNS ALG performs DNSSEC.

정답: A,B,C

문제2

What are two types of system logs that Junos generates? (Choose two.)

A. control plane logs

B. system core dump files

C. SQL log files

D. data plane logs

정답: A,D

설명: (Fast2test 회원만 볼 수 있음)

문제3

Which two statements are true about the fab interface in a chassis cluster? (Choose two.)

A. The fab link supports traditional interface features.

B. The Junos OS supports only one fab link.

C. The physical interface for the fab link must be specified in the configuration.

D. The fab link does not support fragmentation.

정답: A,C

설명: (Fast2test 회원만 볼 수 있음)

문제4

You want to set up JSA to collect network traffic flows from network devices on your network.
Which two statements are correct when performing this task? (Choose two.)

A. Superflows reduce traffic licensing requirements.

B. Statistical sampling decreases event correlation accuracy.

C. Statistical sampling increases processor utilization

D. BGP FlowSpec is used to collect traffic flows from Junos OS devices.

정답: B,D

설명: (Fast2test 회원만 볼 수 있음)

문제5

You are asked to establish an IPsec VPN between two sites. You are also required to establish an OSPFv2 adjacency across this VPN.

A. route-based VPN

B. protocol-based VPN

C. destination-based VPN

D. policy-based VPN

정답: A

문제6

Click the Exhibit button.

You examine the log file shown in the exhibit after running the set security idp active-policy command.
Which two statements are true in this scenario? (Choose two.)

A. The entire configuration was committed.

B. The IDP policy compiled successfully.

C. The IDP hit cache is set to 16384.

D. The IDP policy loaded successfully.

정답: B,D

설명: (Fast2test 회원만 볼 수 있음)

문제7

Which two statements are true about the configuration shown in the exhibit? (Choose two.)

A. Aggressive aging is triggered if the session table reaches 80% capacity.

B. The session is removed from the session table after 10 milliseconds of inactivity.

C. The session is removed from the session table after 10 seconds of inactivity.

D. Aggressive aging is triggered if the session table reaches 95% capacity.

정답: C,D

문제8

You have deployed an SRX300 Series device and determined that files have stopped being scanned.
In this scenario, what is a reason for this problem?

A. The infected host communicated with a command-and-control server, but it did not download malware.

B. You have exceeded the maximum files submission for your SRX platform size.

C. The file is too small to have a virus.

D. The software license is a free model and only scans executable type files.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제9

You are asked to implement IPS on your SRX Series device. In this scenario, which two tasks must be completed before a configuration will work? (Choose two.)

A. Reboot the SRX Series device.

B. Install the IPS signature database.

C. Enroll the SRX Series device with Juniper ATP Cloud.

D. Download the IPS signature database.

정답: B,D

설명: (Fast2test 회원만 볼 수 있음)

문제10

You have just configured source NAT with a pool of addresses within the same subnet as the egress interface. What else must be configured to make the addresses in the pool usable?

A. proxy ARP

B. static NAT

C. destination NAT

D. address persistence

정답: A

문제11

Regarding static attack object groups, which two statements are true? (Choose two.)

A. Group membership does not automatically change when Juniper updates the IPS signature database.

B. Matching attack objects are automatically added to a custom group.

C. You must manually add matching attack objects to a custom group.

D. Group membership automatically changes when Juniper updates the IPS signature database.

정답: A,C

문제12

Which two statements are correct about AppTrack? (Choose two.)

A. AppTrack collects traffic flow information including byte, packet, and duration statistics.

B. AppTrack can only be configured in the main logical system on an SRX Series device.

C. AppTrack identifies and blocks traffic flows that might be malicious regardless of the ports being used.

D. AppTrack can be configured for any defined logical system on an SRX Series device.

정답: A,D

문제13

Which two statements about unified security policies are correct? (Choose two.)

A. APPID results are used to determine the final security policy

B. Unified security policies require an advanced feature license.

C. Traffic can initially match multiple unified security policies.

D. Unified security policies are evaluated after global security policies.

정답: A,C

설명: (Fast2test 회원만 볼 수 있음)

Juniper Security, Specialist (JNCIS-SEC) - JN0-335무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트