What is the first step in the traffic flow when an SSL proxy intercepts a client's outbound HTTPS request?

The proxy establishes a TLS connection with the client and presents its own certificate

The proxy sends the client's request to the security policy engine for inspection

The proxy forwards the encrypted packet to the destination server

The proxy checks the client's IP address against a blacklist

A company wants to protect clients from malware but also needs to ensure that traffic to a specific financial application is not decrypted due to compliance requirements. The financial application uses a fixed IP address. What is the most efficient way to achieve this?

Configure the SSL proxy to ignore the financial application's certificate.

Disable SSL proxy for all traffic and rely on the firewall to block malware.

Use explicit proxy mode and configure the financial application's clients to bypass the proxy.

Create a security policy that permits traffic to the financial application's IP address before the SSL proxy inspection policy.

In a server protection scenario, clients report that they cannot connect to the server through the SSL proxy. What is a common troubleshooting step?

Verify that the proxy's certificate is valid for the server's domain name

Verify that the backend server's private key is installed on the proxy

Ensure the client's browser is configured to use the proxy

Check if the client has the proxy's CA certificate installed

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 6Objective 2

Client and Server Protection JN0-336 Practice Questions (Page 4)

Part of the SSL Proxy domain, which makes up ~9% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

7concepts

Questions 16–19

16foundation · easy
Which SSL proxy deployment mode is used to protect a server by acting as the endpoint for inbound client connections?
Select an answer first
17foundation · easy
What is the first step in the traffic flow when an SSL proxy intercepts a client's outbound HTTPS request?
Select an answer first
18expert · hard
A company wants to protect clients from malware but also needs to ensure that traffic to a specific financial application is not decrypted due to compliance requirements. The financial application uses a fixed IP address. What is the most efficient way to achieve this?
Select an answer first
19foundation · easy
In a server protection scenario, clients report that they cannot connect to the server through the SSL proxy. What is a common troubleshooting step?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.

Client and Server Protection JN0-336 Practice Questions (Page 4)

Questions 16–19

Which SSL proxy deployment mode is used to protect a server by acting as the endpoint for inbound client connections?

What is the first step in the traffic flow when an SSL proxy intercepts a client's outbound HTTPS request?

A company wants to protect clients from malware but also needs to ensure that traffic to a specific financial application is not decrypted due to compliance requirements. The financial application uses a fixed IP address. What is the most efficient way to achieve this?

In a server protection scenario, clients report that they cannot connect to the server through the SSL proxy. What is a common troubleshooting step?

Keep studying — SSL Proxy