A security team has ETI enabled on a policy that allows traffic to a business-critical SaaS application. They start seeing alerts for that traffic, but the application is working fine. What is the best course of action?

Change the ETI action to block to be safe

Disable ETI on that policy to stop the alerts

Review the alerts in ATP Cloud to determine if they are false positives or actual threats

Immediately block the SaaS application domain

Which of the following can be used to match traffic in an ETI policy?

Source IP address and destination port

The certificate serial number of the server

The MAC address of the client device

The encryption key length of the session

An organization is considering ETI to meet compliance requirements for monitoring encrypted traffic. What is a key benefit of ETI over traditional SSL decryption?

ETI does not require decryption, reducing privacy and legal concerns

ETI is faster than decryption because it uses hardware acceleration

ETI provides full visibility into the payload of encrypted traffic

ETI can block all encrypted threats without false positives

Which of the following is a requirement for deploying Encrypted Traffic Insights (ETI) in a Juniper ATP Cloud environment?

A Juniper ATP Cloud subscription and a supported SRX Series device

A separate ETI license for each user on the network

A dedicated hardware appliance for decryption

A public IP address on every SRX interface

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 3Objective 6

Encrypted Traffic Insights (ETI) JN0-336 Practice Questions (Page 2)

Part of the Juniper Advanced Threat Prevention (ATP) Cloud domain, which makes up ~31% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

Questions 6–10

6foundation · easy
Which component in the ETI architecture is responsible for forwarding encrypted traffic metadata to Juniper ATP Cloud?
Select an answer first
7expert · hard
A security team has ETI enabled on a policy that allows traffic to a business-critical SaaS application. They start seeing alerts for that traffic, but the application is working fine. What is the best course of action?
Select an answer first
8foundation · easy
Which of the following can be used to match traffic in an ETI policy?
Select an answer first
9application · medium
An organization is considering ETI to meet compliance requirements for monitoring encrypted traffic. What is a key benefit of ETI over traditional SSL decryption?
Select an answer first
10foundation · easy
Which of the following is a requirement for deploying Encrypted Traffic Insights (ETI) in a Juniper ATP Cloud environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.