What is the purpose of using group information in an identity-aware security policy?

To encrypt traffic between users

To provide load balancing across multiple firewalls

To increase the firewall's throughput

To simplify policy management by applying rules to a set of users

A security administrator is troubleshooting why a specific user's traffic is not matching an identity-aware policy. The user is authenticated, and the policy appears correct. Which command should the administrator use to verify the user's IP-to-username mapping on the SRX firewall?

show configuration security policies

What is the primary purpose of configuring an external identity provider on a Juniper SRX device?

To enable the firewall to authenticate administrator logins

To provide a backup for the firewall's routing table

To retrieve user and group information for use in security policies

To encrypt traffic between the firewall and the internet

An administrator has configured pass-through authentication on an SRX. Users are able to authenticate, but after a period of inactivity, they are prompted to re-authenticate. The administrator wants to extend the time before users are prompted again. Which setting should be modified?

The authentication timeout in the authentication profile.

The security policy's timeout setting.

The LDAP server's timeout setting.

The user's account lockout policy.

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 5Objective 4

Configure, Monitor, or Troubleshoot Identity-Aware Security Policies JN0-336 Practice Questions (Page 2)

Part of the Identity-Aware Security Policies domain, which makes up ~12% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 16 practice questions to prepare you well beyond it. (estimate)

16questions here

4free pages

5concepts

Questions 6–10

6application · medium
An organization wants to enforce identity-based policies for all users on a network segment. They have a mix of Windows and macOS clients. The requirement is that users are authenticated transparently when they access the internet, without any manual login prompt. Which user firewall authentication method should be configured to meet this requirement?
Select an answer first
7foundation · easy
What is the purpose of using group information in an identity-aware security policy?
Select an answer first
8application · medium
A security administrator is troubleshooting why a specific user's traffic is not matching an identity-aware policy. The user is authenticated, and the policy appears correct. Which command should the administrator use to verify the user's IP-to-username mapping on the SRX firewall?
Select an answer first
9foundation · easy
What is the primary purpose of configuring an external identity provider on a Juniper SRX device?
Select an answer first
10application · medium
An administrator has configured pass-through authentication on an SRX. Users are able to authenticate, but after a period of inactivity, they are prompted to re-authenticate. The administrator wants to extend the time before users are prompted again. Which setting should be modified?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.