Juniper JN0-336 Actual Free Exam Questions & Community Discussion

Exam Code/Number: JN0-336
Exam Name/Title: Security, Specialist (JNCIS-SEC)
Certification Provider: Juniper
Corresponding Certification: JNCIS-SEC

Exam Questions: 68
Updated On: Aug 01, 2026

Question #1

Which two statements are correct about IDP policy templates? (Choose two.)

A. They must be installed.

B. They are available on a "factory-default config."

C. They are provided by Juniper Networks.

D. They are not customizable.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #2

Which two statements are correct about redundant fabric interfaces in a chassis cluster? (Choose two.)

A. fab0 and fab1 are located on both node0 and node1.

B. The media type must be the same for each redundant fabric interface.

C. fab0 is located on node0, whereas fab1 is located on node1.

D. The media type can be different for each redundant fabric interface.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #3

You are asked to use Junos Space Security Director to download the latest application signatures in the AppID database.
In this scenario, which two statements are correct? (Choose two.)

A. The AppID database is maintained by a third-party host.

B. The AppID database is stored in Junos Space Security Director.

C. The AppID database is stored on a local storage server in the management network.

D. The AppID database is stored on the managed SRX Series device.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #4

Which two statements are correct about Juniper ATP Cloud malware analysis? (Choose two.)

A. If no match exists in cache, the remaining analysis features are processed with the cumulative threat score transmitted to the SRX Series device.

B. If no match exists in cache, the first analysis feature to generate a threat score is transmitted to the SRX Series device.

C. If a match exists in cache, that threat score is sent to the SRX Series device and the analysis stops.

D. If a match exists in cache, that threat score is sent to the SRX Series device and the analysis continues.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #5

Which two statements are correct about a chassis cluster? (Choose two.)

A. If the cluster ID is set to 0, the HA configuration is ignored.

B. If the node ID is set to 0, the HA configuration is ignored.

C. You must have multiple Layer 2 domains if you require more than 255 node IDs.

D. You must reboot the device anytime you change the node ID configuration.

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #6

You want to include a custom attack object named Custom-FTP-Attack and set the action to drop the packet.

Referring to the exhibit, which modifications would you make?

A. Add custom-attack Custom-FTP-Attack to the action section and change the action to drop-packet.

B. Add custom-attack Custom-FTP-Attack to the notification section and change the action to drop-packet.

C. Add custom-attack Custom-FTP-Attack to the attacks section and change the action to close-client.

D. Add custom-attack Custom-FTP-Attack to the attacks section and change the action to drop-packet.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #7

Which two services would an SRX Series device use to connect to an LDAP server for identity-aware security policies? (Choose two.)

A. TACACS+

B. RADIUS

C. Active Directory

D. JIMS

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Download Free Juniper JN0-336 Demo

Simply submit your e-mail address below to get started with our free demo of your Juniper JN0-336 exam.