Security Policies Management JN0-336 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which log type in Juniper Security Director would you examine to see if traffic was permitted or denied by a security policy?

   • AAudit logs
   • BConfiguration logs
   • CTraffic logs
   • DSystem logs
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which three elements are typically used to define a security policy rule in Juniper Security Director?

   • ASource IP, destination IP, and protocol
   • BSource user, destination user, and action
   • CSource zone, destination zone, and application
   • DSource interface, destination interface, and VPN
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An administrator is designing a security policy in Security Director for a new DMZ segment. The DMZ contains a web server that must be accessible from the internet (untrust zone) on HTTPS, and also accessible from the internal network (trust zone) for management via SSH. The administrator wants to ensure that only the necessary traffic is allowed. What is the best approach?

   • ACreate two policies: one from untrust to DMZ for HTTPS, and one from trust to DMZ for SSH.
   • BCreate a policy from untrust to DMZ allowing HTTPS, and a policy from trust to DMZ allowing all traffic.
   • CCreate a single policy from any to DMZ allowing HTTPS and SSH.
   • DCreate a policy from DMZ to untrust for HTTPS and a policy from DMZ to trust for SSH.
   Reveal Solution Discussion Select an answer first
5. 4expert · medium

   An administrator is configuring security policies for an SRX device. The requirements are: (1) allow HTTP from 'guest' to 'web' zone, (2) block all traffic from 'guest' to 'internal' zone, (3) allow all other traffic from 'guest' to any zone. The administrator creates the following rules in order: rule1: allow HTTP from guest to web, rule2: deny all from guest to internal, rule3: allow all from guest to any. Is this configuration correct?

   • ANo, because rule1 is too specific and should be placed after rule3.
   • BNo, because rule2 should be placed before rule1.
   • CYes, because the rules are in the correct order.
   • DNo, because rule3 will allow traffic to the internal zone.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   After making changes to a security policy in Security Director, the administrator attempts to deploy the configuration to a managed SRX device. The deployment fails with a validation error. What should the administrator do first to resolve the issue?

   • AIgnore the validation error and force the deployment.
   • BReboot the SRX device to clear any temporary issues.
   • CDelete the policy and recreate it from scratch.
   • DReview the validation error details in Security Director to identify the specific configuration issue.
   Reveal Solution Discussion Select an answer first