What is the primary purpose of an SSL proxy when protecting servers?

To intercept and inspect inbound SSL/TLS traffic to prevent attacks and unauthorized access

To encrypt all inbound traffic to the server to ensure data confidentiality at rest

To provide a secure VPN tunnel for remote administrators to access the server

To cache frequently accessed web content to reduce server load

A company uses SSL proxy in reverse proxy mode to protect its internal web server. The server uses a certificate signed by a public CA. What must be configured on the SRX to ensure the server's certificate is trusted?

Install the SRX's certificate on the server.

Disable certificate validation on the SRX.

Generate a new certificate on the SRX and use it for the server.

Install the public CA's certificate on the SRX as a trusted CA.

An administrator notices that SSL proxy is not inspecting traffic from a specific subnet. The SRX is configured in transparent mode. What is the most likely reason?

The security policy for that subnet does not have SSL proxy configured.

The clients in that subnet are not configured to use the SRX as a proxy.

The SRX's certificate is not trusted by the clients in that subnet.

The SRX does not have a route to that subnet.

A company uses SSL proxy in reverse proxy mode to protect its web server. The server's certificate is signed by an internal CA. The SRX is configured to trust the internal CA. However, clients are getting certificate errors. What is the most likely cause?

The SRX is using its own certificate instead of the server's.

The SRX is not configured to present the server's certificate to clients.

The server's certificate has expired.

The clients do not trust the internal CA that signed the server's certificate.

Which type of traffic does an SSL proxy inspect to protect clients from web-based threats?

Inbound traffic destined for a public web server

Traffic between two internal servers

All unencrypted traffic on the network

Outbound SSL/TLS traffic initiated by clients

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 6Objective 2

Client and Server Protection JN0-336 Practice Questions (Page 3)

Part of the SSL Proxy domain, which makes up ~9% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

7concepts

Questions 11–15

11foundation · easy
What is the primary purpose of an SSL proxy when protecting servers?
Select an answer first
12application · medium
A company uses SSL proxy in reverse proxy mode to protect its internal web server. The server uses a certificate signed by a public CA. What must be configured on the SRX to ensure the server's certificate is trusted?
Select an answer first
13application · medium
An administrator notices that SSL proxy is not inspecting traffic from a specific subnet. The SRX is configured in transparent mode. What is the most likely reason?
Select an answer first
14expert · hard
A company uses SSL proxy in reverse proxy mode to protect its web server. The server's certificate is signed by an internal CA. The SRX is configured to trust the internal CA. However, clients are getting certificate errors. What is the most likely cause?
Select an answer first
15foundation · easy
Which type of traffic does an SSL proxy inspect to protect clients from web-based threats?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.