JN0-336 試験問題を無料オンラインアクセス

Which two statements are correct about the security associations of an IPsec VPN? (Choose two.)

• A.IPsec security associations are established during IKEv1 Phase 1 negotiations.
• B.IPsec security associations are established during IKEv1 Phase 2 negotiations.
• C.IKEv1 security associations are established during IKEv1 Phase 1 negotiations.
• D.IKEv1 security associations are established during IKEv1 Phase 2 negotiations.

You are asked to set up SSL proxy in SRX Series devices. An SSL proxy profile is already defined for you.
Which two steps are required to complete the setup? (Choose two.)

• A.Reference the SSL proxy profile in a security policy.
• B.Reference the SSL proxy profile in a security zone.
• C.Enable host-inbound-traffic HTTPS in the security zone in which SSL proxy is referenced.
• D.Enable any Layer 7 services in the security policy in which SSL proxy is referenced.

Which protocol does the SRX Series Firewall use to communicate with a Windows domain controller?

• A.LDAP
• B.SSH
• C.NETCONF
• D.DNS

You need to deploy an SRX Series device in your virtual environment.
In this scenario, what are two benefits of using a CSRX? (Choose two.)

• A.The cSRX supports Layer 2 and Layer 3 deployments.
• B.The cSRX supports firewall, NAT, IPS, and UTM services.
• C.The cSRX has low memory requirements.
• D.The cSRX default configuration contains three default zones: trust, untrust, and management.

Regarding static attack object groups, which two statements are true? (Choose two.)

• A.Group membership automatically changes when Juniper updates the IPS signature database.
• B.Matching attack objects are automatically added to a custom group.
• C.You must manually add matching attack objects to a custom group.
• D.Group membership does not automatically change when Juniper updates the IPS signature database.