Are you ready to prepare for Juniper JNCIS-SEC Certification Exam ?

Juniper Security Specialist (JNCIS-SEC) :- Designed for experienced networking professionals with intermediate knowledge of the Juniper Networks Junos OS for SRX Series devices, this exam verifies the candidate’s understanding of security technologies and related platform configuration and troubleshooting skills.

This practice test exams will give you full confidence to pass the Juniper JNCIS-SEC Exam.

Juniper JNCIS-SEC Exam Sample Questions :-

Q-1 You must fine tune an IPS security policy to eliminate false positives. You want to create exemptions to the normal traffic examination for specific traffic. Which two parameters are required to accomplish this task? (Choose two.)

A. source IP address

B. destination IP address

C. destination port

D. source port

Q-2 You have deployed JSA and you need to view events and network activity that match rule criteria. You must view this data using a single interface. Which JSA feature should you use in this scenario?

A. Log Collector

B. Assets

C. Network Activity

D. Offense Manager

Q-3 You want to use Sky ATP to protect your network; however, company policy does not allow you to send any files to the cloud. Which Sky ATP feature should you use in this situation?

A. Only use on-premises local Sky ATP server anti-malware file scanning.

B. Only use cloud-based Sky ATP file hash lookups.

C. Only use on-box SRX anti-malware file scanning.

D. Only use cloud-based Sky ATP file blacklists.

Q-4 Which two functions are performed by Juniper Identity Management Service (JIMS)? (Choose two.)

A. JIMS synchronizes Active Directory authentication information between a primary and secondary JIMS server.

B. JIMS forwards Active Directory authentication information to SRX Series client devices.

C. JIMS collects and maintains a database of authentication information from Active Directory domains.

D. JIMS replicates Active Directory authentication information to non-trusted Active Directory domain controllers.

Q-5 Which statement is true about high availability (HA) chassis clusters for the SRX Series device?

A. Cluster nodes require an upgrade to HA compliant Routing Engines.

B. Cluster nodes must be connected through a Layer 2 switch.

C. There can be active/passive or active/active clusters.

D. HA clusters must use NAT to prevent overlapping subnets between the nodes.