Juniper JN0-230 Online Practice Questions and Exam Preparation

Juniper JN0-230 Online Questions & Answers

• Question 1:

  Your company has been assigned one public IP address. You want to enable internet traffic to reach multiple servers in your DMZ that are configured with private address. In this scenario, which type of NAT would be used to accomplish this tasks?

  A. Static NAT
  B. Destination NAT
  C. Source NAT
  D. NAT without PAT
  B. Destination NAT

• Question 2:

  On an SRX Series device, how should you configure your IKE gateway if the remote endpoint is a branch office-using a dynamic IP address?

  A. Configure the IPsec policy to use MDS authentication.
  B. Configure the IKE policy to use aggressive mode.
  C. Configure the IPsec policy to use aggressive mode.
  D. Configure the IKE policy to use a static IP address
  B. Configure the IKE policy to use aggressive mode.

• Question 3:

  You are configuring an IPsec VPN tunnel between two location on your network. Each packet must be encrypted and authenticated. Which protocol would satisfy these requirements?

  A. MD5
  B. ESP
  C. AH
  D. SHA
  B. ESP

• Question 4:

  Click the Exhibit button

  

  You have configured source ... Being received By the SRX series Which features must be configured

  A. Port Forwarding
  B. Destination NAT
  C. Proxy ARP
  D. Reverse static NAT
  C. Proxy ARP

• Question 5:

  Which statements describes stateless firewalls on SRX series devices?

  A. Each packet is analyzed by firewall filters
  B. Each packet is analyzed based on application layer security
  C. Each packet is analyzed based on source zone
  D. Each packet is analyzed as part of a session.
  A. Each packet is analyzed by firewall filters

• Question 6:

  Which two statements are true about UTM on an SRX340? (Choose two.)

  A. A default UTM policy is created.
  B. No default profile is created.
  C. No default UTM policy is created
  D. A default UTM profile is created
  B. No default profile is created.
  C. No default UTM policy is created

• Question 7:

  Click the exhibit button

  

  You are configuring an IPsec VPN for the network show in the exhibit Which feature must be enabled the VPN to established successfully?

  A. Main mode must be configured on the IKE gateway
  B. Main mode must be configured on the IPsec VPN
  C. Aggressive mode must be configured on the IPsec VPN
  D. Aggressive mode must be configured on IKE gateway
  D. Aggressive mode must be configured on IKE gateway

• Question 8:

  Users should not have access to Facebook, however, a recent examination of the logs security show that users are accessing Facebook. Referring to the exhibit,

  

  What should you do to solve this problem?

  A. Change the source address for the Block-Facebook-Access rule to the prefix of the users
  B. Move the Block-Facebook-Access rule before the Internet-Access rule
  C. Move the Block-Facebook-Access rule from a zone policy to a global policy
  D. Change the Internet-Access rule from a zone policy to a global policy
  B. Move the Block-Facebook-Access rule before the Internet-Access rule

• Question 9:

  Which source NAT rule set would be used when a packet matches the conditions in multiple rule sets?.

  A. The most specific rule set will be used
  B. The least specific rule set will be used
  C. The first rule set matched will be used
  D. The last rule set matched will be used
  C. The first rule set matched will be used

• Question 10:

  On an SRX device, you want to regulate traffic base on network segments. In this scenario, what do you configure to accomplish this task?

  A. Screens
  B. Zones
  C. ALGs
  D. NAT
  B. Zones