Configure, Monitor, or Troubleshoot SSL Proxy JN0-336 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   Users report that some HTTPS sites are not loading when SSL proxy is enabled. The administrator checks the SSL proxy statistics and sees a high number of 'handshake failures'. What is a likely cause?

   • AThe sites use certificate pinning, which prevents the proxy from impersonating the server.
   • BThe sites are blocked by the security policy.
   • CThe SSL proxy profile is not applied to the correct zone.
   • DThe clients have outdated browsers.
   Reveal Solution Discussion Select an answer first
2. 17expert · medium

   An organization has SSL proxy enabled and users are experiencing slow performance on HTTPS sites. The administrator suspects that SSL proxy is causing the issue. What is the most likely cause of performance degradation?

   • AThe clients are using outdated browsers that do not support modern ciphers.
   • BThe SSL proxy is performing CPU-intensive cryptographic operations for every session.
   • CThe SSL proxy profile is applied to too many zones.
   • DThe security policy is set to log all traffic, causing overhead.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An administrator is configuring SSL proxy on an SRX to inspect outbound HTTPS. Users report certificate errors in their browsers. The administrator has generated a self-signed certificate for the SSL proxy. What is the most likely cause of the certificate errors?

   • AThe security policy is blocking the SSL handshake.
   • BThe SSL proxy is not configured to re-encrypt traffic after inspection.
   • CThe self-signed certificate is not trusted by the clients' browsers.
   • DThe SSL proxy profile is not applied to the correct zone.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What type of information can be found in SSL proxy logs?

   • AThe routing table entries
   • BDetails about decrypted sessions and any errors
   • CThe private keys of all certificates
   • DThe full plaintext content of all decrypted traffic
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An administrator wants to monitor SSL proxy performance and detect potential issues. They need to see the number of sessions that failed to decrypt. Which statistic or log should they examine?

   • AThe 'show security idp statistics' output, looking for 'SSL inspection failures'.
   • BThe 'ssl proxy statistics' output, specifically the 'decrypt failures' counter.
   • CThe 'security flow session' output, looking for sessions with 'SSL' in the application.
   • DThe 'show log messages' output, searching for 'SSL proxy error'.
   Reveal Solution Discussion Select an answer first