Free JN0-335 Questions for Juniper Security, Specialist (JNCIS-SEC) JN0-335 Exam as PDF & Practice Test Engine

Exam Code/Number: JN0-335
Exam Name/Title: Security, Specialist (JNCIS-SEC)
Certification Provider: Juniper
Corresponding Certification: JNCIS-SEC

Exam Questions: 200
Updated On: Jul 15, 2026

Question #1

Which two statements about unified security policies are correct? (Choose two.)

A. Unified security policies are evaluated after global security policies.

B. APPID results are used to determine the final security policy

C. Unified security policies require an advanced feature license.

D. Traffic can initially match multiple unified security policies.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #2

What are two types of collectors for the JATP core engine? (Choose two.)

A. telemetry

B. SNMP

C. Web

D. e-mail

Discussion 0

Correct Answer: C,D Vote an answer

Question #3

Which two statements are correct regarding reth interfaces? (Choose two.)

A. Child interfaces do not need to be in the same slot on both nodes.

B. Child interfaces can be a mixture of Ethernet interface types.

C. Child interfaces must be in the same slot on both nodes

D. Child interfaces must be the same Ethernet interface type.

Discussion 0

Correct Answer: A,D Vote an answer

Question #4

You are asked to block malicious applications regardless of the port number being used. In this scenario, which two application security features should be used? (Choose two.)

A. AppTrack

B. AppFW

C. AppQoE

D. APPID

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #5

Which two statements are true about Juniper ATP Cloud? (Choose two.)

A. Juniper ATP Cloud only uses one antivirus software package to analyze files.

B. Juniper ATP Cloud does not use antivirus software packages to protect against zero-day threats.

C. Juniper ATP Cloud uses multiple antivirus software packages to analyze files.

D. Juniper ATP Cloud uses antivirus software packages to protect against zero-day threats.

Discussion 0

Correct Answer: B,C Vote an answer

Question #6

Which two statements are true about Juniper ATP Cloud? (Choose two.)

A. If the cache lookup determines that a file contains malware, performed to verify the results.

B. If the cache lookup determines that a file contains malware, static analysis is not performed to verify the results.

C. Dynamic analysis is not always necessary to determine if a file contains malware.

D. Dynamic analysis is always performed to determine if a file contains malware.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #7

You must deploy AppSecure in your network to block risky applications. In this scenario, which two AppSecure features are required? (Choose two.)

A. AppTrack

B. APBR

C. AppFW

D. AppID

Discussion 0

Correct Answer: A,D Vote an answer

Question #8

Which two devices would you use for DDoS protection with Policy Enforcer? (Choose two.)

A. vQFX

B. MX

C. QFX

D. vMX

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #9

Referring to the exhibit, what will the SRX Series device do in this configuration?

A. Packets from the infected hosts with a threat level of 8 will be dropped and no log message will be generated.

B. Packets from the infected hosts with a threat level of 8 will be dropped and a log message will be generated.

C. Packets from the infected hosts with a threat level of 8 or above will be dropped and a log message will be generated.

D. Packets from the infected hosts with a threat level of 8 or above will be dropped and no log message will be generated.

Discussion 0

Correct Answer: D Vote an answer

Question #10

Which two statements are correct about AppTrack? (Choose two.)

A. AppTrack identifies and blocks traffic flows that might be malicious regardless of the ports being used.

B. AppTrack collects traffic flow information including byte, packet, and duration statistics.

C. AppTrack can only be configured in the main logical system on an SRX Series device.

D. AppTrack can be configured for any defined logical system on an SRX Series device.

Discussion 0

Correct Answer: B,D Vote an answer

Question #11

A routing change occurs on an SRX Series device that involves choosing a new egress interface.
In this scenario, which statement is true for all affected current sessions?

A. The current sessions might change based on the corresponding security policy.

B. The current session are torn dowm only if the policy-rematch option has been enabled.

C. The current sessions are torn down and go through first path processing based on the new route.

D. The current sessions do not change.

Discussion 0

Correct Answer: C Vote an answer

Question #12

Referring to the SRX Series flow module diagram shown in the exhibit, where is IDP/IPS processed?

A. Security Policy

B. Screens

C. Services ALGs

D. Forwarding Lookup

Discussion 0

Correct Answer: C Vote an answer

Question #13

Which solution enables you to create security policies that include user and group information?

A. NETCONF

B. JIMS

C. ATP Appliance

D. Network Director

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Free JN0-335 Questions for Juniper Security, Specialist (JNCIS-SEC) JN0-335 Exam as PDF & Practice Test Engine

Download Free Juniper JN0-335 Demo