A company has multiple branch offices, each with its own DNS server. They want to implement DNS security policies centrally to block malicious domains across all branches. What is the most efficient way to achieve this?

Use a firewall rule to block all DNS traffic at the branch firewalls

Use a single DNS server for all branches

Configure each branch's DNS server individually with the same policy

Use Juniper ATP Cloud to manage DNS security policies centrally and push them to all branch DNS servers

What role does threat intelligence play in IoT threat detection in Juniper ATP Cloud?

It is not used in IoT threat detection

It is used only for DNS security, not IoT

It provides real-time updates on known malicious IPs and domains

It replaces the need for behavioral analysis

Which type of attack is specifically targeted at DNS infrastructure?

Man-in-the-middle attack on HTTP

A company wants to block access to a list of known malicious domains for all users on the network. They have Juniper ATP Cloud integrated with their DNS infrastructure. What is the most efficient way to enforce this?

Create a DNS security policy that includes the list of malicious domains and apply it to all users

Configure the firewall to block all DNS queries

Use a custom DNS server that blocks the domains

Create a separate firewall rule for each domain

A hospital has a large number of IoT devices, including infusion pumps and patient monitors, that run on a separate network segment. The security team is concerned about these devices being compromised and used as a launchpad for attacks. What is the primary security challenge that makes traditional security solutions insufficient for these IoT devices?

IoT devices use proprietary protocols that cannot be inspected

IoT devices are typically managed by the same IT team

IoT devices are always connected to the internet

IoT devices often have limited processing power and cannot run traditional security agents

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 3Objective 7

DNS and IoT Security JN0-336 Practice Questions (Page 5)

Part of the Juniper Advanced Threat Prevention (ATP) Cloud domain, which makes up ~31% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

Questions 21–25

21expert · hard
A company has multiple branch offices, each with its own DNS server. They want to implement DNS security policies centrally to block malicious domains across all branches. What is the most efficient way to achieve this?
Select an answer first
22foundation · easy
What role does threat intelligence play in IoT threat detection in Juniper ATP Cloud?
Select an answer first
23foundation · easy
Which type of attack is specifically targeted at DNS infrastructure?
Select an answer first
24application · medium
A company wants to block access to a list of known malicious domains for all users on the network. They have Juniper ATP Cloud integrated with their DNS infrastructure. What is the most efficient way to enforce this?
Select an answer first
25application · medium
A hospital has a large number of IoT devices, including infusion pumps and patient monitors, that run on a separate network segment. The security team is concerned about these devices being compromised and used as a launchpad for attacks. What is the primary security challenge that makes traditional security solutions insufficient for these IoT devices?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.