Free Juniper JN0-335 Practice Test & Real Exam Questions

Exam Code/Number: JN0-335
Exam Name/Title: Security, Specialist (JNCIS-SEC)
Certification Provider: Juniper
Corresponding Certification: JNCIS-SEC

Exam Questions: 200
Updated On: Jul 05, 2026

Question #73

Your manager asks you to find employees that are watching YouTube during office hours.
Which AppSecure component would you configure to accomplish this task?

A. AppTrack

B. AppQoE

C. AppQoS

D. AppFW

Discussion 0

Correct Answer: A Vote an answer

Question #74

Regarding static attack object groups, which two statements are true? (Choose two.)

A. Group membership automatically changes when Juniper updates the IPS signature database.

B. Group membership does not automatically change when Juniper updates the IPS signature database.

C. Matching attack objects are automatically added to a custom group.

D. You must manually add matching attack objects to a custom group.

Discussion 0

Correct Answer: B,D Vote an answer

Question #75

Which statement describes the AppTrack module in AppSecure?

A. The AppTrack module identifies the applications that are present in network traffic.

B. The AppTrack module provides enforcement with the ability to block traffic, based on specific applications.

C. The AppTrack module provides control by the routing of traffic, based on the application.

D. The AppTrack module provides visibility and volumetric reporting of application usage on the network.

Discussion 0

Correct Answer: A Vote an answer

Question #76

Which solution should you use if you want to detect known attacks using signature-based methods?

A. SSL proxy

B. IPS

C. ALGs

D. JIMS

Discussion 0

Correct Answer: B Vote an answer

Question #77

Which two statements are correct about the cSRX? (Choose two.)

A. The cSRX supports firewall, NAT, IPS, and UTM services.

B. The cSRX has three default zones: trust, untrust, and management.

C. The cSRX only supports Layer 2 "bump-in-the-wire" deployments.

D. The cSRX supports BGP, OSPF, and IS-IS routing services.

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #78

Which two statements are correct when considering IPS rule base evaluation? (Choose two.)

A. IPS applies the most severe action to traffic matching multiple rules,

B. IPS evaluates rules concurrently.

C. IPS applies the least severe action to traffic matching multiple rules.

D. IPS evaluates rules sequentially

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #79

Which two statements about SRX chassis clustering are correct? (Choose two.)

A. SRX chassis clustering supports active/passive and active/active for the data plane.

B. SRX chassis clustering only supports active/passive for the data plane.

C. SRX chassis clustering supports active/passive for the control plane.

D. SRX chassis clustering supports active/active for the control plane.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #80

How does the SSL proxy detect if encryption is being used?

A. It uses application identity services.

B. It verifies the length of the packet

C. It queries the client device.

D. It looks at the destination port number.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Download Free Juniper JN0-335 Demo

Simply submit your e-mail address below to get started with our free demo of your Juniper JN0-335 exam.