Juniper Secure Connect JN0-336 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is deploying Juniper Secure Connect and wants to allow users to connect from any device, including personal devices. The security team is concerned about the security of personal devices. What should the administrator configure to address this concern?

   • AConfigure a security policy that restricts access to sensitive resources based on the user's group membership.
   • BAllow all access from any device without restrictions.
   • CDisable the use of personal devices and require company-issued devices.
   • DRequire users to install a specific antivirus software on their personal devices.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How does a user initiate a connection using the Juniper Secure Connect client?

   • ABy sending an email to the network administrator
   • BBy configuring a static route on the user's device
   • CBy connecting to the SRX via SSH
   • DBy launching the client and entering the gateway hostname or IP address
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A user is trying to connect to the corporate network using the Juniper Secure Connect client. The client successfully downloads the configuration from the gateway, but the tunnel fails to establish. The administrator suspects an issue with the client's local network. Which step should the administrator take to help isolate the problem?

   • AAsk the user to reboot the client computer and try again.
   • BVerify that the user's account is not locked out in Active Directory.
   • CCheck the client's local network connectivity and ensure that UDP 500 and UDP 4500 are not blocked by the user's local firewall.
   • DCheck the SRX security policy to ensure that the user's source IP address is allowed.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An organization already uses IPsec site-to-site VPNs between its branch offices and the main office. They now want to add Juniper Secure Connect for remote users. The administrator wants to ensure that the new remote access VPN does not interfere with the existing site-to-site tunnels. What is the best practice for configuring this?

   • AUse a separate virtual router or routing instance for the Secure Connect traffic.
   • BDisable the existing site-to-site VPNs and replace them with Secure Connect.
   • CAssign the same IP address pool to both the site-to-site and remote access VPNs.
   • DConfigure the Secure Connect Gateway on a different SRX firewall.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   An organization has a hub-and-spoke VPN topology where all branch offices connect to the main office via IPsec. They want to add Juniper Secure Connect for remote users. The administrator wants to ensure that remote users can access resources at the branch offices. What is the best way to achieve this?

   • AAdvertise the branch office routes to the Secure Connect users through the main office SRX.
   • BConfigure the Secure Connect users to connect directly to each branch office.
   • CConfigure the branch offices to use Secure Connect as well.
   • DDisable the site-to-site VPNs and use only Secure Connect.
   Reveal Solution Discussion Select an answer first