DNS and IoT Security JN0-336 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A network administrator notices that users are falling victim to phishing sites that use lookalike domains. They want to proactively block these domains before users click on them. What is the most effective way to achieve this using Juniper ATP Cloud DNS security?

   • AEnable DNS logging to review after the fact
   • BConfigure a firewall rule to block all HTTP traffic
   • CEnable DNS security with a policy that blocks domains categorized as phishing
   • DUse a custom URL filtering list on the firewall
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Why do IoT devices often require specialized security protection beyond traditional endpoint security?

   • ABecause they are always running the latest operating system
   • BBecause they use standard operating systems that are already secure
   • CBecause they are not connected to the network and are therefore harder to monitor
   • DBecause they cannot run standard security software due to resource constraints and diverse protocols
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a unique security challenge commonly associated with IoT devices?

   • AThey are always connected to the internet and require constant patching
   • BThey use proprietary operating systems that are immune to malware
   • CThey are not capable of being compromised due to their simplicity
   • DThey typically have limited processing power and cannot run traditional security agents
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company has a mix of IoT devices, some of which are critical and some are not. They want to enforce strict security policies on the non-critical devices while allowing the critical devices to operate with minimal disruption. What is the best approach?

   • ACreate separate IoT security policies for critical and non-critical devices
   • BUse a single policy that blocks all traffic from non-critical devices
   • CApply the same strict policy to all devices
   • DDo not enforce any policies on critical devices
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A hospital has a mix of IoT devices, some of which are critical for patient care and must remain operational at all times. The security team wants to deploy IoT threat detection but is concerned about false positives causing disruption. What is the best approach to balance security and availability?

   • ADisable IoT threat detection for critical devices
   • BImmediately enforce strict policies that block any anomalous behavior
   • CUse only threat intelligence to block known malicious IPs
   • DStart with monitoring and alerting, then gradually enforce policies after tuning baselines
   Reveal Solution Discussion Select an answer first