Juniper Identity Management Service (JIMS) JN0-336 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of Juniper Identity Management Service (JIMS) in a Juniper security environment?

   • ATo provide a centralized platform for managing firewall rules across multiple SRX devices.
   • BTo collect user identity information from directory services and share it with security devices for identity-aware policies.
   • CTo act as a VPN gateway that authenticates remote users and establishes secure tunnels to the corporate network.
   • DTo perform deep packet inspection on encrypted traffic to identify users based on application signatures.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security team wants to enforce a policy that allows only members of the 'Finance' group to access a sensitive application. They have an SRX firewall and Active Directory. What is the primary reason to use JIMS in this scenario?

   • ATo dynamically map user identities to IP addresses so the SRX can enforce group-based policies.
   • BTo replace the SRX firewall's existing security policies with user-based rules.
   • CTo encrypt traffic between the users and the application.
   • DTo authenticate users before they access the network.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company has deployed JIMS and configured the SRX to use identity-based policies. Users report that some policies are not being applied consistently. The administrator checks the JIMS server and sees that IP-to-user mappings are being generated. What is the next step to verify that the SRX is receiving the correct identity information?

   • ARestart the JIMS server to refresh the mappings.
   • BCheck the SRX routing table to ensure the user subnets are reachable.
   • CVerify that the JIMS agents are running on all domain controllers.
   • DCheck the SRX security policy configuration to ensure the identity-based policies are correctly referencing the user groups.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A user is unable to access a resource that should be allowed by an identity-based policy. The JIMS server shows a mapping for the user's IP address, but the SRX is not matching the policy. The administrator suspects the SRX has stale identity information. What is the most effective way to force the SRX to refresh its identity cache?

   • ARestart the JIMS server to regenerate all mappings.
   • BReboot the user's workstation to generate a new authentication event.
   • CClear the identity cache on the SRX using the 'clear security authentication-table' command.
   • DDisable and re-enable the security policy on the SRX.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   An organization is deploying JIMS with a large Active Directory environment containing thousands of groups. They are concerned about the performance impact on the JIMS server and the SRX. What is the best practice to optimize JIMS performance in this scenario?

   • AIncrease the polling interval for Active Directory synchronization.
   • BConfigure JIMS to retrieve only the specific groups that are used in security policies.
   • CUse a dedicated SRX for each user group.
   • DInstall multiple JIMS servers and load balance them.
   Reveal Solution Discussion Select an answer first