Juniper NetworksCertified Specialist, Security (JNCIS-SEC)
Domain 5Objective 4
Configure, Monitor, or Troubleshoot Identity-Aware Security Policies JN0-336 Practice Questions (Page 1)
Part of the Identity-Aware Security Policies domain, which makes up ~12% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 16 practice questions to prepare you well beyond it. (estimate)
16questions here
4free pages
5concepts
Questions 1–5
- 1
Which protocol is commonly used by Juniper SRX devices to integrate with an external LDAP server for user identity retrieval?
Select an answer first - 2
An administrator has configured an SRX firewall to use an LDAP server for identity retrieval. Users are not being mapped to their groups, and identity-based policies are not working. The administrator has verified that the LDAP server is reachable and the bind credentials are correct. What is the most likely cause of the group mapping failure?
Select an answer first - 3
An organization requires identity-based policies for all users, but they have a mix of managed and unmanaged devices. Managed devices use SSO, while unmanaged devices must authenticate via a web browser. The administrator needs to configure the SRX to support both methods. What is the most efficient way to achieve this?
Select an answer first - 4
A company is using an SRX firewall with an LDAP profile for identity retrieval. The administrator is configuring a new security policy that uses a group called 'Contractors'. The group exists in the LDAP directory, but the policy is not matching for users in this group. The administrator has verified that the users are authenticated and the group-mapping is configured. What is the most likely cause?
Select an answer first - 5
When troubleshooting identity-aware policies, which command would you use to verify that the SRX can reach the LDAP server?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.