Juniper Security, Specialist (JNCIS-SEC) - JN0-334 Exam Questions [2026]

QUESTION NO: 1
Which two statements are true about virtualized SRX Series devices? (Choose two.)

A. vSRX cannot be deployed in transparent mode. B. cSRX can be deployed in routed mode. C. vSRX can be deployed in transparent mode. D. cSRX cannot be deployed in routed mode.

Correct Answer: B,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
When referencing a SSL proxy profile in a security policy, which two statements are correct? (Choose two.)

A. If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is decrypted.
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-ssl-proxy.html B. A security policy can only reference a client-protection SSL proxy profile or a server-protection SSL proxy profile. C. A security policy can reference both a client-protection SSL proxy profile and a server-protection proxy profile. D. If you apply an SSL proxy profile to a security policy and forget to apply any Layer7 services to the security policy, any encrypted traffic that matches the security policy is not decrypted.

Correct Answer: B,D

QUESTION NO: 3
Which two statements apply to policy scheduling? (Choose two.)

A. A policy refers to many schedules. B. Multiple policies can refer to the same schedule. C. A policy refers to one schedule. D. A policy stays active regardless of when the schedule is active.

Correct Answer: B,C

QUESTION NO: 4
You are asked to convert two standalone SRX Series devices to a chassis cluster deployment. You must ensure that your IPsec tunnels will be compatibla with the new deployment.
In this scenario, which two interfaces should be used when binding your tunnel endpoints? (Choose two.)

A. lo0 B. reth C. ge D. pp0

Correct Answer: B,C

QUESTION NO: 5
You must fine tune an IPS security policy to eliminate false positives. You want to create exemptions to the normal traffic examination for specific traffic.
Which two parameters are required to accomplish this task? (Choose two.)

A. destination port B. source port C. destination IP address D. source IP address

Correct Answer: C,D

QUESTION NO: 6
Which two statements describe IPS? (Choose two.)

A. IPS dynamically sends policy changes to SRX Series devices. B. IPS inspects up to Layer 4 in the OSI model. C. IPS can be used to prevent future attacks from occurring. D. IPS inspects up to Layer 7 in the OSI model.

Correct Answer: C,D

QUESTION NO: 7
You have deployed JSA and you need to view events and network activity that match rule criteri a. You must view this data using a single interface.
Which JSA feature should you use in this scenario?

A. Network Activity B. Log Collector C. Assets D. Offense Manager

Correct Answer: A

QUESTION NO: 8
What is the default timeout period for a TCP session in the session table of a Junos security device?

A. 1 minute B. 15 minutes C. 60 minutes D. 30 minutes

Correct Answer: D

QUESTION NO: 9
Which two statements are correct about server-protection SSP proxy? (Choose two.)

A. The server-protection SSL proxy acts as the server from the client's perspective.
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-ssl-proxy.html B. The server-protection SSL proxy forwards the server certificate after modification. C. The server-protection SSL proxy intercepts the server certificate. D. The server-protection SSL proxy is also known as SSL reverse proxy.

Correct Answer: A,D

QUESTION NO: 10
You are deploying the Junos application firewall feature in your network.
In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)

A. destination port B. source port C. destination IP address D. source IP address

Correct Answer: A,C