Pass Your Juniper Exam with JN0-231 Exam Dumps (Updated 103 Questions)
JN0-231 Exam Dumps - Juniper Practice Test Questions
NEW QUESTION # 18
You must monitor security policies on SRX Series devices dispersed throughout locations in your organization using a 'single pane of glass' cloud-based solution.
Which solution satisfies the requirement?
- A. Juniper Sky Enterprise
- B. J-Web
- C. Junos Space
- D. Junos Secure Connect
Answer: C
Explanation:
Junos Space is a management platform that provides a single pane of glass view of SRX Series devices dispersed throughout locations in your organization. It provides visibility into the security policies of the devices, allowing you to quickly identify and respond to security threats. Additionally, it provides the ability to manage multiple devices remotely and in real-time, enabling you to quickly deploy and update security policies on all devices. For more information, please refer to the Juniper Networks Junos Space Network Director User Guide, which can be found on Juniper's website.
NEW QUESTION # 19
Which order is correct for Junos security devices that examine policies for transit traffic?
- A. default policies
global policies
zone policies - B. default policies
zone policies
global policies - C. global policies
zone policies
default policies - D. zone policies
global policies
default policies
Answer: D
NEW QUESTION # 20
Your ISP gives you an IP address of 203.0.113.0/27 and informs you that your default gateway is 203.0.113.1.
You configure destination NAT to your internal server, but the requests sent to the webserver at 203.0.113.5 are not arriving at the server.
In this scenario, which two configuration features need to be added? (Choose two.)
- A. UTM policy
- B. proxy-ARP
- C. firewall filter
- D. security policy
Answer: B,D
NEW QUESTION # 21
You have an FTP server and a webserver on the inside of your network that you want to make available to users outside of the network. You are allocated a single public IP address.
In this scenario, which two NAT elements should you configure? (Choose two.)
- A. NAT pool
- B. source NAT
- C. destination NAT
- D. static NAT
Answer: C,D
NEW QUESTION # 22
Which two statements are correct about functional zones? (Choose two.)
- A. Functional zones are used for out-of-band device management.
- B. Functional zones must have a user-defined name.
- C. Functional zone cannot be referenced in security policies or pass transit traffic.
- D. Multiple types of functional zones can be defined by the user.
Answer: A,C
NEW QUESTION # 23
You are configuring an SRX Series device. You have a set of servers inside your private network that need one-to-one mappings to public IP addresses.
Which NAT configuration is appropriate in this scenario?
- A. NAT-T
- B. source NAT with PAT
- C. destination NAT
- D. static NAT
Answer: D
NEW QUESTION # 24
Which two actions are performed on an incoming packet matching an existing session? (Choose two.)
- A. Security policy evolution
- B. Zone processing
- C. Screens processing
- D. Service ALG processing
Answer: C,D
NEW QUESTION # 25
When operating in packet mode, which two services are available on the SRX Series device? (Choose two.)
- A. MPLS
- B. IDP
- C. UTM
- D. CoS
Answer: A,D
NEW QUESTION # 26
Referring to the exhibit.
Host-inbound-traffic is configured on the DMZ zone and the ge-0/0/9.0 interface attached to that zone.
Which to types of management traffic would be performed on the SRX Series device? (Choose two.)
- A. Finger
- B. HTTPS
- C. SSH
- D. HTTP
Answer: C,D
NEW QUESTION # 27
Which statement about service objects is correct?
- A. All applications in service objects are not available on the vSRX Series device.
- B. All applications are either custom or Junos defined.
- C. All applications are predefined by Junos.
- D. All applications are custom defined by the administrator.
Answer: B
Explanation:
"Service objects represent applications and services that can be assigned to a security policy rule. Applications and services can either be predefined by Junos software or custom defined by the administrator." Reference:
Juniper Networks JNCIA-SEC Exam Guide: https://www.juniper.net/training/certification/certification-exam-guides/jncia-sec-exam-guide/
NEW QUESTION # 28
You are investigating a communication problem between two hosts and have opened a session on the SRX Series device closest to one of the hosts and entered the show security flow session command.
What information will this command provide? (Choose two.)
- A. The end-to-end data path that the packets are taking.
- B. The total active time of the session.
- C. The security policy name that is controlling the session.
- D. The IP address of the host that initiates the session.
Answer: C,D
NEW QUESTION # 29
What are three Junos UTM features? (Choose three.)
- A. content filtering
- B. antivirus
- C. Web filtering
- D. IDP/IPS
- E. screens
Answer: A,B,C
NEW QUESTION # 30
What must you do first to use the Monitor/Alarms/Policy Log workspace in J-Web?
- A. You must enable stream mode security logging on the SRX Series device.
- B. You must enable security logging that uses the TLS transport mode.
- C. You must enable event mode security logging on the SRX Series device.
- D. You must enable logging that uses the SD-Syslog format.
Answer: C
NEW QUESTION # 31
Which two statements are correct about screens? (Choose two.)
- A. Screens are processed on the routing engine.
- B. Screens process inbound packets.
- C. Screens process outbound packets.
- D. Screens are processed on the flow module.
Answer: B,D
NEW QUESTION # 32
Which three operating systems are supported for installing and running Juniper Secure Connect client software? (Choose three.)
- A. macOS
- B. Android
- C. Windows 10
- D. Linux
- E. Windows 7
Answer: A,C,E
Explanation:
Juniper Secure Connect client software is supported on the following three operating systems: Windows 7, Windows 10, and macOS. For more information, please refer to the Juniper Secure Connect Administrator Guide, which can be found on Juniper's website. The guide states: "The Juniper Secure Connect client is supported on Windows 7, Windows 10, and macOS." It also provides detailed instructions on how to install and configure the software for each of these operating systems.
NEW QUESTION # 33
Which two components are part of a security zone? (Choose two.)
- A. fxp0
- B. ge-0/0/0.0
- C. inet.0
- D. address book
Answer: A,B
NEW QUESTION # 34
Which two private cloud solution support vSRX devices? (Choose two.)
- A. Contrail Cloud
- B. VMware Web Services (AWS)
- C. Microsoft Azure
- D. Amazon Web Services (AWS)
- E. VMware NSX
Answer: C,D
NEW QUESTION # 35
What is the correct order of processing when configuring NAT rules and security policies?
- A. Source NAT > static NAT > destination NAT > policy lookup
- B. Destination NAT > policy lookup > source NAT > static NAT
- C. Static NAT > destination NAT> policy lookup > source NAT
- D. Policy lookup > source NAT > static NAT > destination NAT
Answer: C
NEW QUESTION # 36
......
New Real JN0-231 Exam Dumps Questions: https://drive.google.com/open?id=1RARPcKcOvIN-phgtpFI1SEufoSATi_9g
Pass Your JN0-231 Exam Easily with Accurate PDF Questions: https://www.dumpsreview.com/JN0-231-exam-dumps-review.html
