Juniper Exam JN0-335 Topic 7 Question 25 Discussion

Actual exam question for Juniper's JN0-335 exam

Question #: 25
Topic #: 7

On an SRX Series firewall, what are two ways that Encrypted Traffic Insights assess the threat of the traffic? (Choose two.)

AIt decrypts the file in a sandbox.

BIt validates the certificates used.

CIt decrypts the data to validate the hash.

DIt reviews the timing and frequency of the connections.

Show Suggested Answer

Suggested Answer: D

The service that you would implement at your edge device to prioritize VoIP traffic in this scenario is AppQoS. AppQoS is a feature that enables you to allocate bandwidth and prioritize traffic based on application signatures or custom rules. AppQoS can enhance the quality of service and experience for critical or latency-sensitive applications, such as VoIP. You can configure AppQoS policies to assign different classes of service (CoS) values or queue numbers to different applications or traffic flows. You can also define bandwidth limits, guarantees, or bursts for each class or queue.Reference:= [Application Quality of Service Overview], [Configuring Application Quality of Service]

by Lili at Apr 29, 2024, 11:58 PM

Limited Time Offer

25%

Off

Get Premium JN0-335 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Natalie

5 days ago

I'm not sure about the answer. Can someone explain why C) It decrypts the data to validate the hash is not one of the ways?

upvoted 0 times

...

Sylvia

6 days ago

I agree with Trinidad. I also believe that D) It reviews the timing and frequency of the connections is another way.

upvoted 0 times

...

Trinidad

8 days ago

I think the answer is B) It validates the certificates used.

upvoted 0 times

...

Lorean

9 days ago

I'm not sure about B, but I think C is also important. Decrypting the data to validate the hash seems crucial for assessing the threat.

upvoted 0 times

...

Janna

9 days ago

Haha, decrypting the file in a sandbox? That's like trying to catch a ghost with a butterfly net. Gotta go with B and D, those seem like the way to go.

upvoted 0 times

...

Nicolette

10 days ago

I agree with Lashawn. Validating certificates and reviewing timing and frequency of connections make sense.

upvoted 0 times

...

Kendra

11 days ago

I'm going with B and D as well. Decrypting the file in a sandbox sounds a bit overkill, and validating the hash seems unnecessary for this particular question.

upvoted 0 times

...

Lashawn

13 days ago

I think the answer is B and D.

upvoted 0 times

...

Gilma

18 days ago

B and D seem like the most logical options here. Validating the certificates used and reviewing the timing and frequency of the connections would give insight into the potential threat of the encrypted traffic.

upvoted 0 times

...