Data Flow JN0-336 Practice Questions (Page 2)

Questions 6–10

1. 6expert · medium

   A security administrator is troubleshooting a problem where new sessions are being dropped on an SRX, but existing sessions continue to work. The administrator suspects that the session table is full. The administrator also notices that the SRX is configured with a high session limit, but the session table is still filling up quickly. The traffic consists of many short-lived TCP connections. What is the most effective way to reduce the rate at which the session table fills up?

   • AIncrease the session limit further.
   • BDisable the session table for TCP traffic.
   • CConfigure the SRX to use a stateless firewall filter for TCP traffic.
   • DDecrease the TCP session timeout.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security administrator notices that long-lived TCP connections from a specific application are being terminated unexpectedly on an SRX device. The application is designed to keep a connection open for several hours, but the SRX is dropping the session after a shorter period. Which configuration change would most directly address this issue?

   • AConfigure the SRX to use a stateless firewall filter instead of a security policy.
   • BIncrease the session timeout for the specific application's service or application group.
   • CIncrease the maximum session limit on the SRX.
   • DDisable the session table on the SRX to prevent session timeouts.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary role of the session table in a Juniper security device?

   • ATo log all traffic that has been denied by security policies
   • BTo store security policy rules for quick access
   • CTo store routing information for all destinations
   • DTo track the state of active sessions for efficient processing of subsequent packets
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In a Juniper security device, when is NAT applied in the data flow?

   • ANAT is applied only when the packet is dropped.
   • BAfter the forwarding decision, on the egress interface.
   • CAfter the policy enforcement and before the forwarding decision.
   • DBefore the policy lookup stage.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An administrator is troubleshooting a problem where new sessions are being dropped on an SRX, but existing sessions continue to work. The administrator suspects that the session table is full. What is the most likely effect of a full session table on the data flow?

   • AExisting sessions will be dropped to make room for new sessions.
   • BThe SRX will automatically increase the session table size.
   • CAll traffic will be dropped, including existing sessions.
   • DNew sessions will be dropped, but existing sessions will continue to be forwarded.
   Reveal Solution Discussion Select an answer first