An administrator is planning to deploy ETI in a network with SRX devices. What is a key architectural requirement for ETI to function?

SRX devices must be running a minimum Junos version and be registered with Juniper ATP Cloud

All traffic must be routed through a central inline proxy

The network must use only IPv6 addressing

Clients must have ETI client software installed

An administrator is enabling ETI on an SRX and wants to ensure that the SRX can communicate with ATP Cloud. What must be verified?

The SRX is configured with a static route to ATP Cloud

The SRX has a firewall filter allowing all traffic to ATP Cloud

The SRX has a public IP address on all interfaces

The SRX has outbound internet access to ATP Cloud endpoints

An administrator sees an ETI alert for a flow to a known malicious domain. What is the appropriate first action?

Disable ETI to prevent further alerts

Immediately block the domain in the firewall

Ignore the alert because ETI is not reliable

Investigate the alert in ATP Cloud to confirm the threat and check for affected hosts

A company wants to inspect encrypted traffic for malware without breaking TLS connections or requiring clients to install certificates. They have Juniper ATP Cloud and SRX Series firewalls. Which approach aligns with the purpose of Encrypted Traffic Insights?

Install a tap on the network to capture full encrypted packets for offline analysis

Enable ETI on the SRX to forward encrypted traffic metadata to ATP Cloud for analysis

Configure SSL proxy with a custom CA and push the CA to all clients

Use ATP Cloud's sandbox to decrypt and detonate all encrypted traffic

After enabling ETI, an administrator notices that some encrypted flows are not being analyzed. What is the most likely reason?

The flows use TLS 1.3, which ETI does not support

The flows are too short to generate metadata

The SRX is not sending metadata for those flows because they match a policy without ETI enabled

ATP Cloud only analyzes HTTP traffic, not HTTPS

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 3Objective 6

Encrypted Traffic Insights (ETI) JN0-336 Practice Questions (Page 4)

Part of the Juniper Advanced Threat Prevention (ATP) Cloud domain, which makes up ~31% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~11–19 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

Questions 16–20

16application · medium
An administrator is planning to deploy ETI in a network with SRX devices. What is a key architectural requirement for ETI to function?
Select an answer first
17application · medium
An administrator is enabling ETI on an SRX and wants to ensure that the SRX can communicate with ATP Cloud. What must be verified?
Select an answer first
18application · medium
An administrator sees an ETI alert for a flow to a known malicious domain. What is the appropriate first action?
Select an answer first
19application · medium
A company wants to inspect encrypted traffic for malware without breaking TLS connections or requiring clients to install certificates. They have Juniper ATP Cloud and SRX Series firewalls. Which approach aligns with the purpose of Encrypted Traffic Insights?
Select an answer first
20application · medium
After enabling ETI, an administrator notices that some encrypted flows are not being analyzed. What is the most likely reason?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.