Juniper Security, Specialist (JNCIS-SEC) - JN0-335 Exam Questions [2026]

QUESTION NO: 1
Which two statements are true about Juniper ATP Cloud? (Choose two.)

A. Dynamic analysis is not always necessary to determine if a file contains malware. B. If the cache lookup determines that a file contains malware, static analysis is not performed to verify the results. C. If the cache lookup determines that a file contains malware, performed to verify the results. D. Dynamic analysis is always performed to determine if a file contains malware.

Correct Answer: A,B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Referring to the exhibit, what will the SRX Series device do in this configuration?

A. Packets from the infected hosts with a threat level of 8 will be dropped and a log message will be generated. B. Packets from the infected hosts with a threat level of 8 will be dropped and no log message will be generated. C. Packets from the infected hosts with a threat level of 8 or above will be dropped and no log message will be generated. D. Packets from the infected hosts with a threat level of 8 or above will be dropped and a log message will be generated.

Correct Answer: C

QUESTION NO: 3
You must deploy AppSecure in your network to block risky applications. In this scenario, which two AppSecure features are required? (Choose two.)

A. AppFW B. AppID C. AppTrack D. APBR

Correct Answer: B,C

QUESTION NO: 4
The output shown in the exhibit is displayed in which format?

A. syslog B. sd-syslog C. WELF D. binary

Correct Answer: A

QUESTION NO: 5
Your network uses a remote e-mail server that is used to send and receive e-mails for your users.
In this scenario, what should you do to protect users from receiving malicious files thorugh e- mail?

A. Deploy Sky ATP IMAP e-mail protection B. Deploy Sky ATP POP3 e-mail protection C. Deploy Sky ATP MAPI e-mail protection D. Deploy Sky ATP SMTP e-mail protection

Correct Answer: D

QUESTION NO: 6
Which two devices would you use for DDoS protection with Policy Enforcer? (Choose two.)

A. vQFX B. MX C. vMX D. QFX

Correct Answer: B,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
Data plane logging operates in which two modes? (Choose two.)

A. syslog B. event C. stream D. binary

Correct Answer: B,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
When working with network events on a Juniper Secure Analytics device, flow records come from which source?

A. SPAN B. mirror C. switch D. tap port

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).