Juniper Identity Management Service (JIMS) JN0-336 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   An administrator has configured JIMS and the SRX to enforce identity-based policies. Users in the 'Engineering' group are able to access a restricted server, but the policy should only allow 'Engineering' users from the 10.10.10.0/24 subnet. The policy is not working as expected. What is the most likely cause?

   • AThe JIMS server is not mapping users from the 10.10.10.0/24 subnet.
   • BThe SRX policy is configured with only the user group and not the source address condition.
   • CThe SRX is not receiving updates from JIMS.
   • DThe JIMS agents are not installed on the domain controllers that authenticate Engineering users.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the purpose of defining user/group retrieval settings in JIMS configuration?

   • ATo specify which users and groups should be included in the identity mapping information.
   • BTo set the authentication method for users logging into the SRX.
   • CTo define the password policy for the identity provider.
   • DTo configure the SRX firewall rules for those users and groups.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What type of information does JIMS primarily map to user identities?

   • AMAC addresses
   • BPort numbers
   • CHostnames
   • DIP addresses
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security administrator wants to create a policy that blocks access to a file server for users who are not members of the 'IT' group. They have JIMS deployed. What is the role of JIMS in this scenario?

   • ATo provide the SRX with the mapping of user IP addresses to group memberships.
   • BTo authenticate users when they attempt to access the file server.
   • CTo block traffic from non-IT users at the firewall.
   • DTo store the file server's access control list.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization wants to enforce different security policies based on Active Directory group membership. They have configured JIMS to connect to Active Directory and retrieve users. Which configuration step is required to ensure that group information is available for policy decisions on the SRX?

   • AInstall JIMS agents on all client workstations to report group memberships.
   • BCreate local user groups on the SRX that mirror the Active Directory groups.
   • CDefine the Active Directory groups in the JIMS server configuration and enable group retrieval.
   • DConfigure the SRX to query Active Directory directly for group membership.
   Reveal Solution Discussion Select an answer first