Download JN0-231 Study Questions To Pass Security - Associate (JNCIA-SEC)

Download JN0-231 Study Questions To Pass Security – Associate (JNCIA-SEC)

Jonnie Karnath2023-04-12T03:59:50+00:00

To pass the Security – Associate (JNCIA-SEC) exam, candidates need to have a deep understanding of these topics and be able to apply their knowledge to real-world scenarios. Our JN0-231 study questions will help you develop a strong understanding of the exam’s content and format, giving you the confidence you need to tackle any question that comes your way. Our JN0-231 study questions will help you identify any knowledge gaps or weak areas in your exam preparation, so you can focus your study efforts on the areas that need improvement. By using our JN0-231 study questions, you will be fully prepared to pass the exam with flying colors and achieve your certification goals.

Page 1 of 4

1. You have configured a UTM feature profile.

Which two additional configuration steps are required for your UTM feature profile to take effect? (Choose two.)

Associate the UTM policy with an address book.

Associate the UTM policy with a firewall filter.

Associate the UTM policy with a security policy.

Associate the UTM feature profile with a UTM policy.

2. Which feature would you use to protect clients connected to an SRX Series device from a SYN flood attack?

security policy

host inbound traffic

application layer gateway

screen option

3. Which three operating systems are supported for installing and running Juniper Secure Connect client software? (Choose three.)

Windows 7

Android

Windows 10

Linux

macOS

4. Unified threat management (UTM) inspects traffic from which three protocols? (Choose three.)

FTP

SMTP

SNMP

HTTP

SSH

5. You are deploying an SRX Series firewall with multiple NAT scenarios.

In this situation, which NAT scenario takes priority?

interface NAT

source NAT

static NAT

destination NAT

6. You are assigned a project to configure SRX Series devices to allow connections to your webservers. The webservers have a private IP address, and the packets must use NAT to be accessible from the

Internet. The webservers must use the same address for both connections from the Internet and communication with update servers.

Which NAT type must be used to complete this project?

source NAT

destination NAT

static NAT

hairpin NAT

7. You want to implement user-based enforcement of security policies without the requirement of certificates and supplicant software.

Which security feature should you implement in this scenario?

integrated user firewall

screens

802.1X

Juniper ATP

8. Which two statements are correct about functional zones? (Choose two.)

Functional zones must have a user-defined name.

Functional zone cannot be referenced in security policies or pass transit traffic.

Multiple types of functional zones can be defined by the user.

Functional zones are used for out-of-band device management.

9. You want to provide remote access to an internal development environment for 10 remote developers.

Which two components are required to implement Juniper Secure Connect to satisfy this requirement? (Choose two.)

an additional license for an SRX Series device

Juniper Secure Connect client software

an SRX Series device with an SPC3 services card

Marvis virtual network assistant

10. Which two statements are true about Juniper ATP Cloud? (Choose two.)

Juniper ATP Cloud is an on-premises ATP appliance.

Juniper ATP Cloud can be used to block and allow IPs.

Juniper ATP Cloud is a cloud-based ATP subscription.

Juniper ATP Cloud delivers intrusion protection services.

Page 2 of 4

11. Which statement is correct about packet mode processing?

Packet mode enables session-based processing of incoming packets.

Packet mode works with NAT, VPNs, UTM, IDP, and other advanced security services.

Packet mode bypasses the flow module.

Packet mode is the basis for stateful processing.

12. You are monitoring an SRX Series device that has the factory-default configuration applied.

In this scenario, where are log messages sent by default?

Junos Space Log Director

Junos Space Security Director

to a local syslog server on the management network

to a local log file named messages

13. You want to block executable files ("exe) from being downloaded onto your network.

Which UTM feature would you use in this scenario?

IPS

Web filtering

content filtering

antivirus

14. You are investigating a communication problem between two hosts and have opened a session on the SRX Series device closest to one of the hosts and entered the show security flow session command.

What information will this command provide? (Choose two.)

The total active time of the session.

The end-to-end data path that the packets are taking.

The IP address of the host that initiates the session.

The security policy name that is controlling the session.

15. What is the default value of the dead peer detection (DPD) interval for an IPsec VPN tunnel?

20 seconds

5 seconds

10 seconds

40 seconds

16. You want to verify the peer before IPsec tunnel establishment.

What would be used as a final check in this scenario?

traffic selector

perfect forward secrecy

st0 interfaces

proxy ID

17. What is an IP addressing requirement for an IPsec VPN using main mode?

One peer must have dynamic IP addressing.

One peer must have static IP addressing.

Both peers must have dynamic IP addresses.

Both peers must have static IP addressing.

18. Which statement is correct about Junos security policies?

Security policies enforce rules that should be applied to traffic transiting an SRX Series device.

Security policies determine which users are allowed to access an SRX Series device.

Security policies control the flow of internal traffic within an SRX Series device.

Security policies identity groups of users that have access to different features on an SRX Series device.

19. What is the default timeout value for TCP sessions on an SRX Series device?

30 seconds

60 minutes

60 seconds

30 minutes

20. What are two features of the Juniper ATP Cloud service? (Choose two.)

sandbox

malware detection

EX Series device integration

honeypot

Page 3 of 4

21. An application firewall processes the first packet in a session for which the application has not yet been identified.

In this scenario, which action does the application firewall take on the packet?

It allows the first packet.

It denies the first packet and sends an error message to the user.

It denies the first packet.

It holds the first packet until the application is identified.

22. What are two functions of Juniper ATP Cloud? (Choose two.)

malware inspection

Web content filtering

DDoS protection

Geo IP feeds

23. What are two logical properties of an interface? (Choose two.)

link mode

IP address

VLAN ID

link speed

24. 1.Which security policy type will be evaluated first?

A zone policy with no dynamic application set

A global with no dynamic application set

A zone policy with a dynamic application set

A global policy with a dynamic application set

25. Corporate security requests that you implement a policy to block all POP3 traffic from traversing the Internet firewall.

In this scenario, which security feature would you use to satisfy this request?

antivirus

Web filtering

content filtering

antispam

26. You have an FTP server and a webserver on the inside of your network that you want to make available to users outside of the network. You are allocated a single public IP address.

In this scenario, which two NAT elements should you configure? (Choose two.)

destination NAT

NAT pool

source NAT

static NAT

27. Which Web filtering solution uses a direct Internet-based service for URL categorization?

Juniper ATP Cloud

Websense Redirect

Juniper Enhanced Web Filtering

local blocklist

28. Which two statements are correct about global policies? (Choose two.)

Global policies are evaluated after default policies.

Global policies do not have to reference zone context.

Global policies are evaluated before default policies.

Global policies must reference zone contexts.

29. Click the Exhibit button.

Referring to the exhibit, which two statements are correct about the ping command? (Choose two.)

The DMZ routing-instance is the source.

The 10.10.102.10 IP address is the source.

The 10.10.102.10 IP address is the destination.

The DMZ routing-instance is the destination.

30. In J-Web. the management and loopback address configuration option allows you to configure which area?

the IP address of the primary Gigabit Ethernet port

the IP address of the Network Time Protocol server

the CIDR address

the IP address of the device management port

Page 4 of 4

31. Which two criteria should a zone-based security policy include? (Choose two.)

a source port

a destination port

zone context

an action

Facebook Twitter LinkedIn Google + Email