Juniper JN0-335 Exam Questions

Question 6 of 103

You have deployed an SRX300 Series device and determined that files have stopped being scanned.
In this scenario, what is a reason for this problem?

The software license is a free model and only scans executable type files.

The infected host communicated with a command-and-control server, but it did not download malware.

The file is too small to have a virus.

You have exceeded the maximum files submission for your SRX platform size.

Correct Answer: D

The SRX300 Series device has a limit on the number of files it can scan or submit for analysis based on its platform size and license. If this limit is exceeded, additional files will not be scanned, which explains why files have stopped being scanned.

Question 7 of 103

Which three statements about SRX Series device chassis clusters are true? (Choose three.)

Chassis cluster control links must be configured using RFC 1918 IP addresses.

Chassis cluster member devices synchronize configuration using the control link.

A control link failure causes the secondary cluster node to be disabled.

Recovery from a control link failure requires that the secondary member device be rebooted.

Heartbeat messages verify that the chassis cluster control link is working.

Correct Answer: B, C, E

Chassis cluster member devices synchronize configuration using the control link. A control link failure causes the secondary cluster node to be disabled. Heartbeat messages verify that the chassis cluster control link is working.

Question 8 of 103

Which two statements are correct about security policy changes when using the policy rematch feature? (Choose two.)

When a policy change includes changing the policy's action from permit to deny, all existing sessions are maintained.

When a policy change includes changing the policy's source or destination address match condition, all existing sessions are dropped.

When a policy change includes changing the policy's action from permit to deny, all existing sessions are dropped.

When a policy change includes changing the policy's source or destination address match condition, all existing sessions are reevaluated.

Correct Answer: C, D

Question 9 of 103

You are asked to block malicious applications regardless of the port number being used.
In this scenario, which two application security features should be used? (Choose two.)

AppFW

AppQoE

APPID

AppTrack

Correct Answer: A, C

Question 10 of 103

A client has attempted communication with a known command-and-control server and it has reached the configured threat level threshold.
Which feed will the client's IP address be automatically added in this situation?

the command-and-control cloud feed

the allowlist and blocklist feed

the custom cloud feed

the infected host cloud feed

Correct Answer: D