Security, Associate (JNCIA-SEC) JN0-231 Exam Updated Questions

dumps2022-09-08T09:07:00+08:00

Security, Associate (JNCIA-SEC) JN0-231 exam updated questions are available, which are valid in the preparation. In the real Juniper JNCIA-SEC JN0-231 exam, there are 65 multiple-choice questions, and you have 90 minutes to complete all the questions. After you take the Juniper JN0-231 exam, the pass/fail status is available immediately. The available language is English. Free Juniper JNCIA-SEC Certification JN0-231 exam updated questions are below.

Page 1 of 2

1. You are asked to configure your SRX Series device to block all traffic from certain countries. The solution must be automatically updated as IP prefixes become allocated to those certain countries.

Which Juniper ATP solution will accomplish this task?

Geo IP

unified security policies

IDP

C&C feed

2. What is the order of the first path packet processing when a packet enters a device?

security policies C> screens C> zones

screens C> security policies C> zones

screens C> zones C> security policies

security policies C> zones C> screens

3. You are asked to verify that a license for AppSecure is installed on an SRX Series device.

In this scenario, which command will provide you with the required information?

user@srx> show system license

user@srx> show services accounting

user@srx> show configuration system

user@srx> show chassis firmware

4. What are two features of the Juniper ATP Cloud service? (Choose two.)

sandbox

malware detection

EX Series device integration

honeypot

5. Which statement is correct about packet mode processing?

Packet mode enables session-based processing of incoming packets.

Packet mode works with NAT, VPNs, UTM, IDP, and other advanced security services.

Packet mode bypasses the flow module.

Packet mode is the basis for stateful processing.

6. Which IPsec protocol is used to encrypt the data payload?

ESP

IKE

TCP

7. Which two IKE Phase 1 configuration options must match on both peers to successfully establish a tunnel? (Choose two.)

VPN name

gateway interfaces

IKE mode

Diffie-Hellman group

8. Click the Exhibit button.

You are asked to allow only ping and SSH access to the security policies shown in the exhibit.

Which statement will accomplish this task?

Rename policy Rule-2 to policy Rule-0.

Insert policy Rule-2 before policy Rule-1.

Replace application any with application [junos-ping junos-ssh] in policy Rule-1.

Rename policy Rule-1 to policy Rule-3.

9. Which two UTM features should be used for tracking productivity and corporate user behavior? (Choose two.)

the content filtering UTM feature

the antivirus UTM feature

the Web filtering UTM feature

the antispam UTM feature

10. Which two IPsec hashing algorithms are supported on an SRX Series device? (Choose two.)

SHA-1

SHAKE128

MD5

RIPEMD-256

Page 2 of 2

11. Which statement about NAT is correct?

Destination NAT takes precedence over static NA

Source NAT is processed before security policy lookup.

Static NAT is processed after forwarding lookup.

Static NAT takes precedence over destination NA

12. You want to provide remote access to an internal development environment for 10 remote developers.

Which two components are required to implement Juniper Secure Connect to satisfy this requirement? (Choose two.)

an additional license for an SRX Series device

Juniper Secure Connect client software

an SRX Series device with an SPC3 services card

Marvis virtual network assistant

13. What is the correct order in which interface names should be identified?

system slot number C> interface media type C> port number C> line card slot number

system slot number C> port number C> interface media type C> line card slot number

interface media type C> system slot number C> line card slot number C> port number

interface media type C> port number C> system slot number C> line card slot number

14. You want to enable the minimum Juniper ATP services on a branch SRX Series device.

In this scenario, what are two requirements to accomplish this task? (Choose two.)

Install a basic Juniper ATP license on the branch device.

Configure the juniper-atp user account on the branch device.

Execute the Juniper ATP script on the branch device.

15. What must be enabled on an SRX Series device for the reporting engine to create reports?

packet capture

security logging

system logging

SNMP

16. Which two statements are correct about functional zones? (Choose two.)

Functional zones must have a user-defined name.

Functional zone cannot be referenced in security policies or pass transit traffic.

Multiple types of functional zones can be defined by the user.

Functional zones are used for out-of-band device management.

17. What information does the show chassis routing-engine command provide?

chassis serial number

resource utilization

system version

routing tables

18. Which three Web filtering deployment actions are supported by Junos? (Choose three.)

Use IP

Use local lists.

Use remote lists.

Use Websense Redirect.

Use Juniper Enhanced Web Filtering.

19. Which two statements are correct about screens? (Choose two.)

Screens process inbound packets.

Screens are processed on the routing engine.

Screens process outbound packets.

Screens are processed on the flow module.

20. What are three Junos UTM features? (Choose three.)

screens

antivirus

Web filtering

IDP/IPS

content filtering

Security, Associate (JNCIA-SEC) JN0-231 Exam Updated Questions

Security, Associate (JNCIA-SEC) JN0-231 Exam Updated Questions

Share this post

Leave a Reply Cancel reply

Related Posts