Juniper JN0-335 Practice Exams
Last updated on Oct 22,2026- Exam Code: JN0-335
- Exam Name: Security, Specialist (JNCIS-SEC)
- Certification Provider: Juniper
- Latest update: Oct 22,2026
Question #41
Which two statements are true about the vSRX? (Choose two.)
- A . It does not have VMXNET3 vNIC support.
- B . It has VMXNET3 vNIC support.
- C . UNIX is the base OS.
- D . Linux is the base OS.
Correct Answer: BD
BD
Explanation:
Reference: Juniper Networks Security, Specialist (JNCIS-SEC) Study Guide, Chapter 1: Introduction to Junos Security, page 1-8.
The vSRX is a virtual security appliance that runs on a virtual machine. It provides firewall, VPN, and other security services in a virtualized environment.
The vSRX is based on a version of Junos OS that is optimized for virtualization. It runs on a Linux kernel and uses a KVM hypervisor. It supports VMware ESXi and KVM hypervisors.
The vSRX has support for VMXNET3 vNICs, which are high-performance virtual network interfaces provided by VMware. These interfaces can provide higher throughput and lower CPU utilization than other virtual NIC types.
BD
Explanation:
Reference: Juniper Networks Security, Specialist (JNCIS-SEC) Study Guide, Chapter 1: Introduction to Junos Security, page 1-8.
The vSRX is a virtual security appliance that runs on a virtual machine. It provides firewall, VPN, and other security services in a virtualized environment.
The vSRX is based on a version of Junos OS that is optimized for virtualization. It runs on a Linux kernel and uses a KVM hypervisor. It supports VMware ESXi and KVM hypervisors.
The vSRX has support for VMXNET3 vNICs, which are high-performance virtual network interfaces provided by VMware. These interfaces can provide higher throughput and lower CPU utilization than other virtual NIC types.
Question #42
You want to deploy a virtualized SRX in your environment.
In this scenario, why would you use a vSRX instead of a cSRX? (Choose two.)
- A . The vSRX supports Layer 2 and Layer 3 configurations.
- B . Only the vSRX provides clustering.
- C . The vSRX has faster boot times.
- D . Only the vSRX provides NAT, IPS, and UTM services
Correct Answer: A B
A B
Explanation:
vSRX provides flexible networking capabilities which include support for both Layer 2 (data link) and Layer 3 (network) configurations. This allows it to handle a variety of routing and switching tasks within virtual environments.
Clustering capability, which involves grouping multiple vSRX instances to operate as a single entity for redundancy and high availability, is a feature specific to vSRX. This is critical in environments where continuous uptime and resilience are required.
A B
Explanation:
vSRX provides flexible networking capabilities which include support for both Layer 2 (data link) and Layer 3 (network) configurations. This allows it to handle a variety of routing and switching tasks within virtual environments.
Clustering capability, which involves grouping multiple vSRX instances to operate as a single entity for redundancy and high availability, is a feature specific to vSRX. This is critical in environments where continuous uptime and resilience are required.
Question #43
Which two statements are true about Juniper ATP Cloud? (Choose two.)
- A . Juniper ATP Cloud only uses one antivirus software package to analyze files.
- B . Juniper ATP Cloud uses multiple antivirus software packages to analyze files.
- C . Juniper ATP Cloud uses antivirus software packages to protect against zero-day threats.
- D . Juniper ATP Cloud does not use antivirus software packages to protect against zero-day threats.
Correct Answer: B, D
B, D
Explanation:
Two statements that are true about Juniper ATP Cloud are:
Juniper ATP Cloud uses multiple antivirus software packages to analyze files: Juniper ATP Cloud is a cloud-based service that provides advanced threat prevention and detection for your network. It integrates with SRX Series firewalls and MX Series routers to analyze files and network traffic for signs of malicious activity. Juniper ATP Cloud uses multiple antivirus software packages from different vendors to scan files for known malware signatures and provide a comprehensive verdict based on their results.
Juniper ATP Cloud does not use antivirus software packages to protect against zero-day threats: Juniper ATP Cloud protects against zero-day threats by using dynamic analysis, not antivirus software packages. Dynamic analysis is a method of executing files in a sandbox environment and observing their behavior and network interactions. Dynamic analysis can uncover unknown malware that may evade static analysis or signature-based detection methods.
Reference: = Juniper Advanced Threat Prevention Cloud (ATP Cloud), Juniper Advanced Threat Prevention Cloud | ATP Cloud | Juniper Networks, Breaking Down Security Complexity with Juniper Networks’ ATP Cloud
B, D
Explanation:
Two statements that are true about Juniper ATP Cloud are:
Juniper ATP Cloud uses multiple antivirus software packages to analyze files: Juniper ATP Cloud is a cloud-based service that provides advanced threat prevention and detection for your network. It integrates with SRX Series firewalls and MX Series routers to analyze files and network traffic for signs of malicious activity. Juniper ATP Cloud uses multiple antivirus software packages from different vendors to scan files for known malware signatures and provide a comprehensive verdict based on their results.
Juniper ATP Cloud does not use antivirus software packages to protect against zero-day threats: Juniper ATP Cloud protects against zero-day threats by using dynamic analysis, not antivirus software packages. Dynamic analysis is a method of executing files in a sandbox environment and observing their behavior and network interactions. Dynamic analysis can uncover unknown malware that may evade static analysis or signature-based detection methods.
Reference: = Juniper Advanced Threat Prevention Cloud (ATP Cloud), Juniper Advanced Threat Prevention Cloud | ATP Cloud | Juniper Networks, Breaking Down Security Complexity with Juniper Networks’ ATP Cloud
Question #44
Which two sources are used by Juniper Identity Management Service (JIMS) for collecting username and device IP addresses? (Choose two.)
- A . Microsoft Exchange Server event logs
- B . DNS
- C . Active Directory domain controller event logs
- D . OpenLDAP service ports
Correct Answer: B C
B C
Explanation:
Juniper Identity Management Service (JIMS) collects username and device IP addresses from both DNS and Active Directory domain controller event logs. DNS is used to resolve hostnames to IP addresses, while Active Directory domain controller event logs are used to get information about user accounts, such as when they last logged in.
B C
Explanation:
Juniper Identity Management Service (JIMS) collects username and device IP addresses from both DNS and Active Directory domain controller event logs. DNS is used to resolve hostnames to IP addresses, while Active Directory domain controller event logs are used to get information about user accounts, such as when they last logged in.
Question #45
When a security policy is modified, which statement is correct about the default behavior for active sessions allowed by that policy?
- A . The active sessions allowed by the policy will be dropped.
- B . Only policy changes that involve modification of the action field will cause the active sessions affected by the change to be dropped.
- C . Only policy changes that involve modification of the application will cause the active sessions affected by the change to be dropped.
- D . The active sessions allowed by the policy will continue unchanged.
Correct Answer: D
D
Explanation:
When you modify a security policy on the SRX Series device, the default behavior is that the existing sessions that match the policy will continue unchanged. This means that the policy modification will only affect new sessions that are initiated after the change. However, you can change this behavior by using the clear-policy-session command, which will clear all the sessions that match the modified policy and force them to re-evaluate the new policy. Reference: = JNCIS-SEC Certification, Open Learning – Security, Specialist (JNCIS-SEC), Security Policies (Advanced)
D
Explanation:
When you modify a security policy on the SRX Series device, the default behavior is that the existing sessions that match the policy will continue unchanged. This means that the policy modification will only affect new sessions that are initiated after the change. However, you can change this behavior by using the clear-policy-session command, which will clear all the sessions that match the modified policy and force them to re-evaluate the new policy. Reference: = JNCIS-SEC Certification, Open Learning – Security, Specialist (JNCIS-SEC), Security Policies (Advanced)
Question #46
You are asked to implement IPS on your SRX Series device.
In this scenario, which two tasks must be completed before a configuration will work? (Choose two.)
- A . Download the IPS signature database.
- B . Enroll the SRX Series device with Juniper ATP Cloud.
- C . Install the IPS signature database.
- D . Reboot the SRX Series device.
Correct Answer: A C
A C
Explanation:
The two tasks that must be completed before a configuration for IPS on an SRX Series device will work are downloading the IPS signature database and installing the IPS signature database. The Security, Specialist (JNCIS-SEC) Study guide provides further information on how to download and install the IPS signature database. Enrolling the SRX Series device with Juniper ATP Cloud is not necessary to make a configuration work, and rebooting the SRX Series device is not required either.
A C
Explanation:
The two tasks that must be completed before a configuration for IPS on an SRX Series device will work are downloading the IPS signature database and installing the IPS signature database. The Security, Specialist (JNCIS-SEC) Study guide provides further information on how to download and install the IPS signature database. Enrolling the SRX Series device with Juniper ATP Cloud is not necessary to make a configuration work, and rebooting the SRX Series device is not required either.
Question #47
You are preparing a proposal for a new customer who has submitted the following requirements for a vSRX deployment:
— globally distributed,
— rapid provisioning,
— scale based on demand,
— and low CapEx.
Which solution satisfies these requirements?
- A . AWS
- B . Network Director
- C . Juniper ATP Cloud
- D . VMWare ESXi
Correct Answer: A
A
Explanation:
The solution that satisfies the requirements for a vSRX deployment is AWS. AWS (Amazon Web Services) is a cloud computing platform that provides on-demand services such as infrastructure, platform, software, and database as a service. AWS is globally distributed, meaning that it has data centers in multiple regions around the world. AWS also allows rapid provisioning, meaning that you can launch vSRX instances in minutes using preconfigured Amazon Machine Images (AMIs) or custom templates. AWS also enables scaling based on demand, meaning that you can adjust the number and size of vSRX instances according to your network traffic and performance needs. AWS also has low CapEx (capital expenditure), meaning that you only pay for what you use and do not need to invest in hardware or maintenance costs.
Reference: = vSRX Deployment Guide for AWS, Understand vSRX Virtual Firewall with AWS, What Is Amazon Web Services?
A
Explanation:
The solution that satisfies the requirements for a vSRX deployment is AWS. AWS (Amazon Web Services) is a cloud computing platform that provides on-demand services such as infrastructure, platform, software, and database as a service. AWS is globally distributed, meaning that it has data centers in multiple regions around the world. AWS also allows rapid provisioning, meaning that you can launch vSRX instances in minutes using preconfigured Amazon Machine Images (AMIs) or custom templates. AWS also enables scaling based on demand, meaning that you can adjust the number and size of vSRX instances according to your network traffic and performance needs. AWS also has low CapEx (capital expenditure), meaning that you only pay for what you use and do not need to invest in hardware or maintenance costs.
Reference: = vSRX Deployment Guide for AWS, Understand vSRX Virtual Firewall with AWS, What Is Amazon Web Services?
Question #48
Which two statements are correct about Juniper ATP Cloud? (Choose two.)
- A . Once the target threshold is met, Juniper ATP Cloud continues looking for threats from 0 to 5 minutes.
- B . Once the target threshold is met, Juniper ATP Cloud continues looking for threats levels range from 0 to 10 minutes.
- C . The threat levels range from 0-10.
- D . The threat levels range from 0-100.
Correct Answer: C D
C D
Explanation:
In many threat intelligence and evaluation systems, including Juniper ATP Cloud, the threat levels are often scored on a scale to provide a quick reference of the potential risk associated with a threat. A common range for these threat levels is from 0 to 10, with 0 representing minimal or no threat and 10 representing a severe threat.
Alternatively, some systems may use a more granular scoring system ranging from 0 to 100, providing a more nuanced assessment of threat levels. This range allows for finer differentiation between the levels of threat severity.
C D
Explanation:
In many threat intelligence and evaluation systems, including Juniper ATP Cloud, the threat levels are often scored on a scale to provide a quick reference of the potential risk associated with a threat. A common range for these threat levels is from 0 to 10, with 0 representing minimal or no threat and 10 representing a severe threat.
Alternatively, some systems may use a more granular scoring system ranging from 0 to 100, providing a more nuanced assessment of threat levels. This range allows for finer differentiation between the levels of threat severity.
Question #49
Which two statements are correct when considering IPS rule base evaluation? (Choose two.)
- A . IPS evaluates rules concurrently.
- B . IPS applies the most severe action to traffic matching multiple rules,
- C . IPS evaluates rules sequentially
- D . IPS applies the least severe action to traffic matching multiple rules.
Correct Answer: B C
Question #50
Which solution enables you to create security policies that include user and group information?
- A . JIMS
- B . ATP Appliance
- C . Network Director
- D . NETCONF
Correct Answer: A
A
Explanation:
The solution that enables you to create security policies that include user and group information is JIMS (Juniper Identity Management Service). JIMS collects and maintains a large database of user, device, and group information from Active Directory domains or syslog sources, and enables SRX Series devices to rapidly identify thousands of users in a large, distributed enterprise. With JIMS, you can create security policies that include user and group information, and enforce user-based access control policies to protect network resources.
A
Explanation:
The solution that enables you to create security policies that include user and group information is JIMS (Juniper Identity Management Service). JIMS collects and maintains a large database of user, device, and group information from Active Directory domains or syslog sources, and enables SRX Series devices to rapidly identify thousands of users in a large, distributed enterprise. With JIMS, you can create security policies that include user and group information, and enforce user-based access control policies to protect network resources.