Is the JN0-336 practice exam free?

Yes. ExamCademy offers all 64 JN0-336 practice questions for free with a registered account. No payment needed. Optional supporter features add AI explanations and spaced repetition study tools.

How accurate are the JN0-336 practice questions?

All JN0-336 questions are community-created and reviewed by moderators to align with Juniper's published exam objectives. The community continuously reports and fixes issues to keep content accurate and up to date.

How should I study for the JN0-336 exam?

Start by browsing practice questions to identify weak areas. Use spaced repetition (Learn Mode) to focus study time on topics you struggle with. Combine practice questions with official Juniper documentation and hands-on experience for best results.

JN0-336 Practice Exam — Free 64+ Questions

64Practice Questions

3Study Modes

FreeTo Get Started

Topic:Sort:

Question 1

High Availability (HA) Clustering

Question 2

Security Director

Question 3

Identity-Aware Security Policies

Question 4

SSL Proxy

Question 5

Identity-Aware Security Policies

Question 6

Security Director

Question 7

IPsec VPN

Question 8

Identity-Aware Security Policies

Question 9

Security Director

Question 10

Security Director

Question 11

Intrusion Detection and Prevention (IDP)

Question 12

Juniper Advanced Threat Prevention (ATP) Cloud

Question 13

IPsec VPN

Question 14

IPsec VPN

Question 15

High Availability (HA) Clustering

Question 16

High Availability (HA) Clustering

Question 17

High Availability (HA) Clustering

Question 18

Identity-Aware Security Policies

Question 19

Security Director

Question 20

Intrusion Detection and Prevention (IDP)

Question 21

Security Director

Question 22

Intrusion Detection and Prevention (IDP)

Question 23

High Availability (HA) Clustering

Question 24

Security Director

Question 25

IPsec VPN

Page 1 of 3 • Questions 1-25 of 64

1 2 3

→

Know a question that should be here? Contribute to this exam

You are configuring a redundancy group using Ethernet interfaces.
In this scenario, which two actions must be performed? (Choose two.)

A Assign a physical interface from each node to the reth0 interface.
B Set the retry interval
C Define the number of reth interfaces in a cluster under the chassis cluster hierarchy.
D Configure the heartbeat interval.

Which three actions does Junos Space Security Director perform during the device discovery process? (Choose three.)

A It imports the device’s active device configuration.
B it reboots the device.
C It imports device status information.
D It adds a local superuser account to the device configuration.
E It connects to the device using SSH.

Question Image

Referring to the exhibit, which two statements are correct? (Choose two.)

A IP address 192.168.1.10 is the SRX Series device.
B IP address 192.168.1.10 is the primary JIMS server.
C The JIMS server to the domain controller connection is online.
D The SRX Series device to the JIMS connection is online.

You want to configure the SSL proxy feature on your SRX Series Firewall.
Which two actions must you perform to accomplish this task? (Choose two.)

A Enable the SSL ALG.
B Create an SSL proxy profile.
C Create an SSL application object.
D Associate an SSL proxy profile with a security policy.

You want to use user identity information to secure your network.
Which two actions must you perform on your SRX Series Firewall to accomplish this task? (Choose two.)

A Create security policies that include user identity configuration
B Add user accounts to the Active Directory Domain Users group
C Configure an identity provider on your SRX Series Firewall.
D Add the user identity feature license to your SRX Series Firewall.

You are asked to onboard an SRX Series device to Junos Space Security Director, but it is not working.
In this scenario, what are three areas that should be reviewed? (Choose three.)

A chassis serial number
B SSH port number
C active security policies
D authentication credentials
E IP address

When creating an IPsec tunnel, which type of encryption uses public and private keys?

A symmetric encryption
B asymmetric encryption
C DES encryption
D AES encryption

What is a function of the Juniper Identity Management Service?

A encrypting user e-mail
B logging malicious code sent through ingress and egress ports
C encrypting network data traffic
D maintaining a centralized authentication table

Which three different objects would be created, modified, cloned, and deleted in the Shared Objects workspace of Junos Space Security Director? (Choose three.)

A geo IP
B IP address
C audit logs
D policy enforcement groups
E policy rules

Using Junos Space Security Director, you want to configure a unique firewall policy for a specific SRX Series device.
Which firewall policy rules you would satisfy the requirement?

A all devices policy prerules
B group policy prerules
C device policy rules
D all devices policy postrules

Which IDP action is also referred to as a silent discard?

A no action
B close client and server
C ignore connection
D drop packet

Which two statements describe how Juniper ATP Cloud improves security? (Choose two.)

A It tracks and logs malicious traffic.
B It offers real-time threat analysis and mitigation.
C It simulates real user environments to trigger malicious code execution.
D It increases performance speeds.

Question Image

What does the exhibit indicate when you have configured a single IPsec VPN on an SRX Series Firewall?

A The IPsec VPN has encountered errors during packet transmission.
B The IPsec VPN is established, and traffic is passing through.
C The IPsec VPN is not established.
D The IPsec VPN is established, but no traffic is passing through.

Which three algorithms are used to encrypt IP packets? (Choose three.)

A Data Encryption Standard (DES)
B Secure Hash Algorithm (SHA) - 1
C Message Digest 5 (MD5)
D Triple Data Encryption Standard (3DES)
E Advanced Encryption Standard (AES)

Question Image

A pair of branch SRX Series devices are booted up in cluster mode.
Referring to the exhibit, which statement is correct?

A the devices are not running the same version of Junos.
B the devices are not the same hardware.
C fxp0 or fxp1 on either device has an existing configuration.
D node1 is running a "factory-default config".

Which two statements are correct about redundant fabric interfaces in a chassis cluster? (Choose two.)

A fab0 and fab1 are located on both node0 and node1.
B fab0 is located on node0, whereas fab1 is located on node1.
C The media type must be the same for each redundant fabric interface.
D The media type can be different for each redundant fabric interface.

Which two statements are correct about fabric interfaces on an SRX Series Firewall? (Choose two.)

A In an active/active configuration, inter-chassis traffic uses the fab link.
B In an active/passive configuration, inter-chassis traffic uses the fab link.
C The node ID is reflected in the fabric interface name.
D The cluster ID is reflected in the fabric interface name.

Which statement is correct about Active Directory as an identity source for identity-aware security policies?

A It supports a maximum of two domains.
B It supports logical systems.
C It supports 20 Active Directory servers per domain.
D It tracks non-Windows Active Directory users.

You are asked to use Junos Space Security Director to download the latest application signatures in the AppID database.
In this scenario, which two statements are correct? (Choose two.)

A The AppID database is stored in Junos Space Security Director.
B The AppID database is stored on the managed SRX Series device.
C The AppID database is maintained by a third-party host.
D The AppID database is stored on a local storage server in the management network.

Which two statements are correct about IDP policy templates? (Choose two.)

A They are provided by Juniper Networks.
B They are not customizable.
C They are available on a “factory-default config.”
D They must be installed.

Which two steps are necessary to prepare the Active Directory domain for a JIMS installation? (Choose two.)

A Create two limited access user accounts.
B Create three limited access user accounts.
C Add one full access user account to Active Directory groups.
D Add limited access user accounts to Active Directory groups.

What are two ways to help reduce false positives for an IDP rule? (Choose two.)

A Change the rule to a lower severity action.
B Remove the attack object from the rule.
C Create an exempt rule.
D Configure a terminal rule at the end of the rule base.

In Juniper high availability (HA) SRX Series device implementations, which interface will be used to exchange session state, configuration files, and ensure session continuity across nodes using the proprietary Trivial Network Protocol?

A fab
B fxp0
C fxp1
D swfab

What are three policy types available in Junos Space Security Director? (Choose three.)

A device
B local
C group
D universal
E global

You need to secure communications from a mobile command center which uses a 5G mobile ISP behind CGNAT to an SRX Series Firewall at headquarters.
Which two actions should be performed on the SRX Series Firewall in this scenario? (Choose two.)

A Configure the IPsec VPN to use NAT-T.
B Configure the IPsec VPN to use IKEv1 aggressive mode.
C Configure the IPsec VPN to use IKEv2 aggressive mode.
D Configure the IPsec VPN to use DPD.

JN0-336Preview

About the JN0-336 Exam

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

JN0-336Preview

About the JN0-336 Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25