Free Juniper JN0-335 Practice Test & Real Exam Questions

Exam Code/Number: JN0-335
Exam Name/Title: Security, Specialist (JNCIS-SEC)
Certification Provider: Juniper
Corresponding Certification: JNCIS-SEC

Exam Questions: 200
Updated On: Jul 05, 2026

Question #65

Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)

A. JIMS forwards Active Directory authentication information to SRX Series client devices.

B. JIMS collects and maintains a database of authentication information from Active Directory domains.

C. JIMS replicates Active Directory authentication information to non-trusted Active Directory domain controllers.

D. JIMS synchronizes Active Directory authentication information between a primary and secondary JIMS server.

Discussion 0

Correct Answer: B,D Vote an answer

Question #66

What information does encrypted traffic insights (ETI) use to notify SRX Series devices about known malware sites?

A. MAC addresses

B. certificates

C. dynamic address groups

D. domain names

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #67

Click the Exhibit button.

You have deployed Sky ATP to protect your network from attacks so that users are unable to download malicious files. However, after a user attempts to download a malicious file, they are still able to communicate through the SRX Series device.
Referring to the exhibit, which statement is correct?

A. Lower the verdict threshold in the advanced anti-malware policy.

B. Configure a security intelligence policy and apply it to the security policy.

C. Remove the fallback options in the advanced anti-malware policy.

D. Change the security policy from a standard security policy to a unified security policy.

Discussion 0

Correct Answer: B Vote an answer

Question #68

Which two features are configurable on Juniper Secure Analytics (JSA) to ensure that alerts are triggered when matching certain criteria? (Choose two.)

A. assets

B. events

C. building blocks

D. tests

Discussion 0

Correct Answer: B,C Vote an answer

Question #69

Which two statements about SRX Series device chassis clusters are true? (Choose two.)

A. Redundancy group 0 is only active on the cluster backup node.

B. Each chassis cluster member device can host active redundancy groups

C. Each chassis cluster member requires a unique cluster ID value.

D. Chassis cluster member devices must be the same model.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #70

What are two types of collectors for the JATP core engine? (Choose two.)

A. Web

B. SNMP

C. e-mail

D. telemetry

Discussion 0

Correct Answer: A,C Vote an answer

Question #71

Which two statements are correct regarding reth interfaces? (Choose two.)

A. Child interfaces must be in the same slot on both nodes

B. Child interfaces do not need to be in the same slot on both nodes.

C. Child interfaces must be the same Ethernet interface type.

D. Child interfaces can be a mixture of Ethernet interface types.

Discussion 0

Correct Answer: B,C Vote an answer

Question #72

Referring to the exhibit, you want to deploy Sky ATP with Policy Enforcer to block infected hosts at the access layer.

To complete this task, where should you configure the default gateway for the User-1 device?

A. the irb interface on QFX-1

B. the interface on SRX-1 that connects to QFX-2

C. the irb interface on QFX-2

D. the interface of QFX-1 that connects to User-1

Discussion 0

Correct Answer: A Vote an answer

Download Free Juniper JN0-335 Demo

Simply submit your e-mail address below to get started with our free demo of your Juniper JN0-335 exam.