A company has a hybrid network with SRX devices in multiple regions. They want ETI to provide a unified view of encrypted threats across all regions. What is a key consideration?

All SRX devices must be registered to the same ATP Cloud tenant

The SRX devices must be connected via a VPN

Each region must have its own ATP Cloud instance

ETI only works with SRX devices in the same data center

A company wants to use ETI to inspect traffic to a partner's website, but the partner has strict data privacy requirements and does not want their traffic decrypted. What is the best approach?

Use ETI to inspect the traffic without decryption, respecting the partner's requirements

Decrypt the traffic using a custom CA and inform the partner

Use a separate ATP Cloud tenant for the partner's traffic

Block all traffic to the partner's website

What is a required step when enabling Encrypted Traffic Insights (ETI) on an SRX Series firewall?

Disabling SSL/TLS inspection on all other security policies

Installing a valid certificate on the SRX to perform SSL interception

Enabling the ETI feature and connecting the SRX to Juniper ATP Cloud

Configuring a security policy to permit all encrypted traffic

An organization needs to inspect encrypted traffic to sensitive servers but wants to minimize false positives. What ETI policy configuration would best meet this need?

Enable ETI on all policies and set the action to block on any alert

Enable ETI only on policies that match traffic to sensitive servers and set the action to alert

Enable ETI on all policies and set the action to permit

Disable ETI and rely on traditional signature-based detection

An administrator is deploying ETI in an environment where the SRX is behind a NAT device. What is a potential issue?

ETI does not work with NAT because it requires a public IP on the SRX

NAT will cause ETI to inspect only internal traffic

The SRX may not be able to establish a connection to ATP Cloud if NAT is not configured correctly

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 3Objective 6

Encrypted Traffic Insights (ETI) JN0-336 Practice Questions (Page 3)

Part of the Juniper Advanced Threat Prevention (ATP) Cloud domain, which makes up ~31% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

Questions 11–15

11expert · hard
A company has a hybrid network with SRX devices in multiple regions. They want ETI to provide a unified view of encrypted threats across all regions. What is a key consideration?
Select an answer first
12expert · hard
A company wants to use ETI to inspect traffic to a partner's website, but the partner has strict data privacy requirements and does not want their traffic decrypted. What is the best approach?
Select an answer first
13foundation · easy
What is a required step when enabling Encrypted Traffic Insights (ETI) on an SRX Series firewall?
Select an answer first
14application · medium
An organization needs to inspect encrypted traffic to sensitive servers but wants to minimize false positives. What ETI policy configuration would best meet this need?
Select an answer first
15expert · hard
An administrator is deploying ETI in an environment where the SRX is behind a NAT device. What is a potential issue?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.