An administrator is creating a security policy to allow a custom application that uses TCP port 8080. In Junos, what is the most efficient way to define this in the policy?

Use the junos-https application object

Create a custom application object for TCP port 8080 and reference it in the policy

Specify the port directly in the policy without an application object

Use the predefined junos-http application object

A security engineer is troubleshooting a Junos policy that allows DNS queries from internal clients to an external server. The policy matches UDP port 53, but some queries fail intermittently. What is the most likely reason for the failures?

The policy should also match ICMP for DNS error reporting

The external server is using TCP port 53 exclusively

DNS responses exceed the UDP size limit and require TCP port 53

UDP port 53 is only for queries, and responses use a random high port

A Junos device is configured to allow SSH management from a specific admin subnet. The policy matches TCP port 22. What is the default port for SSH, and why is it important for the policy?

UDP port 22, because SSH uses UDP for faster transmission

TCP port 22, because SSH is the standard encrypted management protocol

TCP port 23, because SSH is a replacement for Telnet

TCP port 443, because SSH can use HTTPS

How do you create a custom service object in Junos for a non-standard port?

Use the set security policy custom-service command.

Create a firewall filter to match the port.

Modify the predefined service object to change its port.

Define a custom application with the desired protocol and port.

Juniper NetworksCertified Specialist, Security (JNCIS-SEC)

Domain 5Objective 2

Ports and Protocols JN0-336 Practice Questions (Page 3)

Part of the Identity-Aware Security Policies domain, which makes up ~12% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

5concepts

Questions 11–15

11application · medium
An administrator is creating a security policy to allow a custom application that uses TCP port 8080. In Junos, what is the most efficient way to define this in the policy?
Select an answer first
12application · medium
A security engineer is troubleshooting a Junos policy that allows DNS queries from internal clients to an external server. The policy matches UDP port 53, but some queries fail intermittently. What is the most likely reason for the failures?
Select an answer first
13application · easy
A network administrator is configuring a Junos security policy to allow remote management of a Juniper device from a central NOC. The NOC requires encrypted management traffic. Which port and protocol combination should the policy match?
Select an answer first
14application · easy
A Junos device is configured to allow SSH management from a specific admin subnet. The policy matches TCP port 22. What is the default port for SSH, and why is it important for the policy?
Select an answer first
15foundation · easy
How do you create a custom service object in Junos for a non-standard port?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-336

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-336” is a trademark of its owner, used for identification only.