What is the function of an SSL proxy profile?

To set the encryption algorithm for all network traffic

To configure the device's management access

To define the security policies for decrypted traffic

To define which traffic is decrypted and inspected

Which certificate is typically used by SSL proxy to establish a secure connection with the destination server?

A self-signed certificate generated by the proxy

An administrator wants to verify that SSL proxy is decrypting traffic as expected. They have enabled SSL proxy and applied it to a security policy. What is the quickest way to confirm that decryption is occurring?

Use the 'show log messages' command and search for 'SSL proxy'.

Use the 'show security flow session' command and look for 'SSL' in the application field.

Check the security policy hit counts.

Check the SSL proxy statistics for an increasing 'decrypted sessions' counter.

A security team wants to block downloads of executable files from the internet for a specific user group, but allow all other HTTPS traffic. They have SSL proxy enabled. Which configuration is required to enforce this action?

Create a security policy with an application rule that matches executable file transfers and set the action to deny.

Configure the SSL proxy profile to block executable files based on URL category.

Apply a firewall filter to drop packets containing executable file signatures.

Use a custom IDP rule to block executable file downloads.

An administrator is monitoring SSL proxy and notices that the 'decrypted sessions' counter is not increasing, but traffic is flowing. What does this indicate?

The traffic is using a protocol that SSL proxy does not support.

The security policy is not matching the traffic.

SSL proxy is not decrypting traffic, possibly due to a configuration issue.

The traffic is being decrypted but the counter is not updating.

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 6Objective 3

Configure, Monitor, or Troubleshoot SSL Proxy JN0-336 Practice Questions (Page 1)

Part of the SSL Proxy domain, which makes up ~9% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

6concepts

Questions 1–5

1foundation · easy
What is the function of an SSL proxy profile?
Select an answer first
2foundation · easy
Which certificate is typically used by SSL proxy to establish a secure connection with the destination server?
Select an answer first
3application · medium
An administrator wants to verify that SSL proxy is decrypting traffic as expected. They have enabled SSL proxy and applied it to a security policy. What is the quickest way to confirm that decryption is occurring?
Select an answer first
4application · medium
A security team wants to block downloads of executable files from the internet for a specific user group, but allow all other HTTPS traffic. They have SSL proxy enabled. Which configuration is required to enforce this action?
Select an answer first
5expert · medium
An administrator is monitoring SSL proxy and notices that the 'decrypted sessions' counter is not increasing, but traffic is flowing. What does this indicate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.