Which statement correctly describes the SSL proxy process on Juniper devices?

The client and server establish a direct encrypted connection that the device passively observes

The device decrypts traffic by using the server's private key without altering the session

The device only decrypts traffic that is destined to the device itself

The device acts as a transparent proxy, terminating the client connection and establishing a new connection to the server

A company is experiencing SSL handshake failures when clients connect to certain external sites through the SRX SSL proxy. The administrator has verified that the SSL proxy profile is correctly applied. What is a common cause of handshake failures in this scenario?

The external server uses a cipher suite that the SSL proxy does not support.

The security policy is set to deny all traffic.

The SSL proxy certificate has expired.

The clients are not using a supported browser.

An administrator is setting up SSL proxy for the first time. They have generated a CA certificate and a server certificate for the proxy. What is the correct way to configure these certificates in the SSL proxy profile?

Both certificates must be imported into the client browsers manually.

Specify the CA certificate as the trusted CA and the server certificate as the default certificate for re-encryption.

Use the server certificate as the trusted CA and the CA certificate as the default certificate.

Only the server certificate is needed; the CA certificate is optional.

What is a common performance issue associated with SSL proxy?

Increased CPU usage due to encryption and decryption

What is a common cause of SSL handshake failures when SSL proxy is enabled?

The server's IP address is incorrect

The security policy is set to permit

The client does not trust the proxy's certificate

The SSL proxy profile is not applied

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 6Objective 3

Configure, Monitor, or Troubleshoot SSL Proxy JN0-336 Practice Questions (Page 3)

Part of the SSL Proxy domain, which makes up ~9% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

6concepts

Questions 11–15

11foundation · easy
Which statement correctly describes the SSL proxy process on Juniper devices?
Select an answer first
12application · medium
A company is experiencing SSL handshake failures when clients connect to certain external sites through the SRX SSL proxy. The administrator has verified that the SSL proxy profile is correctly applied. What is a common cause of handshake failures in this scenario?
Select an answer first
13application · medium
An administrator is setting up SSL proxy for the first time. They have generated a CA certificate and a server certificate for the proxy. What is the correct way to configure these certificates in the SSL proxy profile?
Select an answer first
14foundation · easy
What is a common performance issue associated with SSL proxy?
Select an answer first
15foundation · easy
What is a common cause of SSL handshake failures when SSL proxy is enabled?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.