Why must the SSL proxy's certificate be installed and trusted on client devices for client protection to work?

To allow the proxy to decrypt and inspect the client's outbound traffic

To encrypt the client's traffic with a stronger algorithm

To authenticate the client to the proxy

To ensure the client's traffic is routed to the correct destination

An organization wants to protect both its internal users (from malicious outbound traffic) and its public web servers (from inbound attacks). They have a single SRX device. What is the most appropriate deployment strategy?

Use explicit proxy mode for outbound traffic and transparent mode for inbound traffic.

Use reverse proxy mode for both outbound and inbound traffic.

Use transparent mode for outbound traffic and reverse proxy mode for inbound traffic on the same SRX.

Use explicit proxy mode for both outbound and inbound traffic.

A client is receiving certificate errors when browsing HTTPS sites through the SSL proxy. What is the most likely cause?

The destination server's certificate has expired

The proxy is configured to use a weak encryption algorithm

The proxy's CA certificate is not installed in the client's trusted root store

The client's browser is outdated and does not support TLS 1.2

What is the primary purpose of an SSL proxy when protecting clients on a network?

To replace the client's web browser certificate with a trusted public CA certificate

To intercept and inspect outbound SSL/TLS traffic from clients to detect and block threats

To encrypt all outbound traffic from clients to prevent eavesdropping on the local network

To provide clients with a secure tunnel to access internal servers without authentication

In a server protection scenario, what is a common security policy applied to inbound SSL traffic?

Blocking all inbound traffic from unknown source IP addresses

Requiring all clients to present a valid client certificate

Redirecting all traffic to a different server for load balancing

Inspecting the decrypted traffic for intrusion attempts and blocking malicious payloads

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 6Objective 2

Client and Server Protection JN0-336 Practice Questions (Page 2)

Part of the SSL Proxy domain, which makes up ~9% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

7concepts

Questions 6–10

6foundation · easy
Why must the SSL proxy's certificate be installed and trusted on client devices for client protection to work?
Select an answer first
7application · medium
An organization wants to protect both its internal users (from malicious outbound traffic) and its public web servers (from inbound attacks). They have a single SRX device. What is the most appropriate deployment strategy?
Select an answer first
8foundation · easy
A client is receiving certificate errors when browsing HTTPS sites through the SSL proxy. What is the most likely cause?
Select an answer first
9foundation · easy
What is the primary purpose of an SSL proxy when protecting clients on a network?
Select an answer first
10foundation · easy
In a server protection scenario, what is a common security policy applied to inbound SSL traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.