Updated Feb-2023 JN0-231 Free Exam Files Downloaded Instantly
Practice Exams and Training Solutions for Certifications
NEW QUESTION 56
Which Juniper ATP feed provides a dynamic list of known botnet servers and known sources of malware downloads?
- A. blocklist feed
- B. infected host cloud feed
- C. Geo IP feed
- D. C&C cloud feed
Answer: B
NEW QUESTION 57
Which statements is correct about global security policies?
- A. Global policies eliminate the need to assign interface to security zones.
- B. Global security require you to identify a source and destination zone.
- C. Traffic matching global is not added to the session table.
- D. Global policies allow you to regulate traffic with addresses and applications, regardless of their security zones.
Answer: D
NEW QUESTION 58
When operating in packet mode, which two services are available on the SRX Series device? (Choose two.)
- A. UTM
- B. IDP
- C. MPLS
- D. CoS
Answer: C,D
NEW QUESTION 59
What is the number of concurrent Secure Connect user licenses that an SRX Series device has by default?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
Explanation:
The number of concurrent Secure Connect user licenses that an SRX Series device has by default is 2. Secure Connect is a feature of Juniper SRX Series devices that allows you to securely connect to remote networks via IPsec VPN tunnels. Each SRX Series device comes with two concurrent Secure Connect user licenses by default, meaning that it can support up to two simultaneous IPsec VPN connections. For more information, please refer to the Juniper Networks SRX Series Services Gateways Security Configuration Guide, which can be found on Juniper's website.
NEW QUESTION 60
Firewall filters define which type of security?
- A. Dynamic enforcement
- B. Stateful
- C. Stateless
- D. NGFW
Answer: C
NEW QUESTION 61
Click the Exhibit button.
Which two statements are correct about the partial policies shown in the exhibit? (Choose two.)
- A. TCP traffic matched by the reject-all policy will have a TCP RST sent.
- B. UDP traffic matched by the deny-all policy will be silently dropped.
- C. TCP traffic matched from the zone trust is allowed by the permit-all policy.
- D. UDP traffic matched by the reject-all policy will be silently dropped.
Answer: A,B
NEW QUESTION 62
Referring to the exhibit.
Which type of NAT is being performed?
- A. Source NAT without PAT
- B. Source NAT with PAT
- C. Destination NAT without PAT
- D. Destination NAT with PAT
Answer: B
NEW QUESTION 63
You are installing a new SRX Series device and you are only provided one IP address from your ISP.
In this scenario, which NAT solution would you implement?
- A. interface-based source NAT
- B. pool-based NAT with PAT
- C. pool-based NAT without PAT
- D. pool-based NAT with address shifting
Answer: A
NEW QUESTION 64
On an SRX device, you want to regulate traffic base on network segments.
In this scenario, what do you configure to accomplish this task?
- A. ALGs
- B. Screens
- C. Zones
- D. NAT
Answer: C
NEW QUESTION 65
Exhibit.
Which statement is correct regarding the interface configuration shown in the exhibit?
- A. The interface MTU has been increased.
- B. The interface is assigned to the trust zone by default.
- C. The IP address is assigned to unit 0.
- D. The IP address has an invalid subnet mask.
Answer: C
NEW QUESTION 66
Which Statement is correct about Sky ATP?
- A. Sky ATP relies on the SRX series device to open and analyze suspect file attachments
- B. The local Sky ATP platform downloads the latest threat from managed site
- C. Sky ATP is a local hardware-based security threat analyzer that performs multiple tasks.
- D. Sky ATP can provide live threat feeds to SRX series devices
Answer: D
NEW QUESTION 67
You want to automatically generate the encryption and authentication keys during IPsec VPN establishment.
What would be used to accomplish this task?
- A. Aggregate mode
- B. IPsec
- C. Main mode
- D. Diffie_Hellman
Answer: D
NEW QUESTION 68
Which two IPsec hashing algorithms are supported on an SRX Series device? (Choose two.)
- A. RIPEMD-256
- B. SHA-1
- C. SHAKE128
- D. MD5
Answer: B,D
NEW QUESTION 69
Your company uses SRX Series devices to secure the edge of the network. You are asked protect the company from ransom ware attacks.
Which solution will satisfy this requirement?
- A. Sky ATP
- B. AppSecure
- C. screens
- D. Unified security policies
Answer: A
NEW QUESTION 70
Click the Exhibit button.
Which two statements are correct about the partial policies shown in the exhibit? (Choose two.)
- A. TCP traffic matched by the reject-all policy will have a TCP RST sent.
- B. UDP traffic matched by the deny-all policy will be silently dropped.
- C. TCP traffic matched from the zone trust is allowed by the permit-all policy.
- D. UDP traffic matched by the reject-all policy will be silently dropped.
Answer: A,B
NEW QUESTION 71
You want to integrate an SRX Series device with SKY ATP.
What is the first action to accomplish task?
- A. Issue the commit script to register the SRX Series device.
- B. Create the SSL VPN tunnel between the SRX Series device and Sky ATP.
- C. Copy the operational script from the Sky ATP Web UI.
- D. Create an account with the Sky ATP Web UI.
Answer: D
NEW QUESTION 72
Which two criteria should a zone-based security policy include? (Choose two.)
- A. a destination port
- B. a source port
- C. an action
- D. zone context
Answer: A,B
Explanation:
A security policy is a set of statements that controls traffic from a specified source to a specified destination using a specified service. A policy permits, denies, or tunnels specified types of traffic unidirectionally between two points.
Each policy consists of:
A unique name for the policy.
A from-zone and a to-zone, for example: user@host# set security policies from-zone untrust to-zone untrust A set of match criteria defining the conditions that must be satisfied to apply the policy rule. The match criteria are based on a source IP address, destination IP address, and applications. The user identity firewall provides greater granularity by including an additional tuple, source-identity, as part of the policy statement.
A set of actions to be performed in case of a match-permit, deny, or reject.
Accounting and auditing elements-counting, logging, or structured system logging.
https://www.juniper.net/documentation/us/en/software/junos/security-policies/topics/topic-map/security-policy-configuration.html
NEW QUESTION 73
Click the Exhibit button.
Which two user roles shown in the exhibit are available be defaults? (choose two)
- A. Super-user
- B. Operator
- C. Jtac
- D. Admin
Answer: A,B
NEW QUESTION 74
When are Unified Threat Management services performed in a packet flow?
- A. after network address translation
- B. before security policies are evaluated
- C. only during the first path process
- D. as the packet enters an SRX Series device
Answer: A
NEW QUESTION 75
......
Q&As with Explanations Verified & Correct Answers: https://www.topexamcollection.com/JN0-231-vce-collection.html
Dumps Free Test Engine Player Verified Answers: https://drive.google.com/open?id=1bNULVaXLsa6NTvZq4QBRrARrKngcXxMu
