JN0-335 無料問題集「Juniper Security, Specialist (JNCIS-SEC)」

（A）The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Security Director instance.

（B）The vSRX devices serving as local enforcement points for VPCs can be managed by a centralized Junos Space Network Director instance.

（C）IPsec tunnels can be used to connect vSRX in different VPCs.

（D）MPLS LSPs can be used to connect vSRXs in different VPCs.

（A）Incidents have an associated threat number assigned to them.

（B）Incidents consist of all the events associated with a single threat.

（C）Incidents are always automatically mitigated.

（D）Incidents are sorted by category, followed by severity.

（A）infinite number of interfaces

（B）scalability

（C）no required software license

（D）granular security

（A）e-mail

（B）Web

（C）SNMP

（D）telemetry

（A）Configure a security intelligence policy and apply it to the security policy.

（B）Change the security policy from a standard security policy to a unified security policy.

（C）Remove the fallback options in the advanced anti-malware policy.

（D）Lower the verdict threshold in the advanced anti-malware policy.

（A）IPS can be used to prevent future attacks from occurring.

（B）IPS dynamically sends policy changes to SRX Series devices.

（C）IPS inspects up to Layer 4 in the OSI model.

（D）IPS inspects up to Layer 7 in the OSI model.

（A）The cSRX only supports Layer 2 "bump-in-the-wire" deployments.

（B）The cSRX has three default zones: trust, untrust, and management.

（C）The cSRX supports BGP, OSPF, and IS-IS routing services.

（D）The cSRX supports firewall, NAT, IPS, and UTM services.

（A）Dynamic analysis is not always necessary to determine if a file contains malware.

（B）If the cache lookup determines that a file contains malware, static analysis is not performed to verify the results.

（C）Dynamic analysis is always performed to determine if a file contains malware.

（D）If the cache lookup determines that a file contains malware, performed to verify the results.

（A）Child interfaces do not need to be in the same slot on both nodes.

（B）Child interfaces can be a mixture of Ethernet interface types.

（C）Child interfaces must be in the same slot on both nodes

（D）Child interfaces must be the same Ethernet interface type.

（A）The current sessions might change based on the corresponding security policy.

（B）The current session are torn dowm only if the policy-rematch option has been enabled.

（C）The current sessions are torn down and go through first path processing based on the new route.

（D）The current sessions do not change.