A security analyst is reviewing a Junos policy that allows NTP traffic from internal servers to an external time source. The policy matches UDP port 123. What is a key consideration for this policy?

The policy should also allow ICMP for NTP synchronization

The policy should match TCP port 123 and UDP port 123

NTP uses TCP, and the policy should match TCP port 123

NTP uses UDP, and the policy must also allow the return traffic from the server

In a Junos security policy, which fields are used to match traffic based on port and protocol?

Interface, zone, and routing table

Source address, destination address, application, and action

Source MAC, destination MAC, and VLAN ID

A Junos administrator is configuring a policy to allow remote administration of a device from a management network. The requirement is to allow both SSH and HTTPS for management. What is the most efficient way to configure this?

Create a custom application object that includes both TCP 22 and TCP 443

Create a custom application object for TCP 22 and use junos-https

Reference both junos-ssh and junos-https in the policy's application list

Use the junos-any application object

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 5Objective 2

Ports and Protocols JN0-336 Practice Questions (Page 2)

Part of the Identity-Aware Security Policies domain, which makes up ~12% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

5concepts

Questions 6–10

6application · easy
A security analyst is reviewing a Junos policy that allows NTP traffic from internal servers to an external time source. The policy matches UDP port 123. What is a key consideration for this policy?
Select an answer first
7foundation · easy
In a Junos security policy, which fields are used to match traffic based on port and protocol?
Select an answer first
8expert · easy
A Junos administrator is configuring a policy to allow remote administration of a device from a management network. The requirement is to allow both SSH and HTTPS for management. What is the most efficient way to configure this?
Select an answer first
9application · easy
A security administrator is configuring a Junos policy to allow secure web access from internal users to the internet. The policy must match HTTPS traffic only. Which port and protocol should be specified?
Select an answer first
10foundation · easy
When configuring a Junos security policy to allow DNS queries, which predefined application should you use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.

Ports and Protocols JN0-336 Practice Questions (Page 2)

Questions 6–10

A security analyst is reviewing a Junos policy that allows NTP traffic from internal servers to an external time source. The policy matches UDP port 123. What is a key consideration for this policy?

In a Junos security policy, which fields are used to match traffic based on port and protocol?

A Junos administrator is configuring a policy to allow remote administration of a device from a management network. The requirement is to allow both SSH and HTTPS for management. What is the most efficient way to configure this?

A security administrator is configuring a Junos policy to allow secure web access from internal users to the internet. The policy must match HTTPS traffic only. Which port and protocol should be specified?

When configuring a Junos security policy to allow DNS queries, which predefined application should you use?

Keep studying — Identity-Aware Security Policies