Juniper Associate JNCIA-SEC JN0-230 Questions & Answers

• Question 1:

  What is the behavior of an SRX series device when UDP and TCP is rejected by a security policy actions? (choose two)

  A. The reject action drops UDP packets and sends an ICMP message to the source

  B. The reject actions drops TCP packets and sends an ICMP message to the source

  C. The reject action drops UDP packets and does not send ant message to the source

  D. The reject action drops TCP packets and send an RST message to the source.

  Correct Answer: AD

• Question 2:

  Which statements describes stateless firewalls on SRX series devices?

  A. Each packet is analyzed by firewall filters

  B. Each packet is analyzed based on application layer security

  C. Each packet is analyzed based on source zone

  D. Each packet is analyzed as part of a session.

  Correct Answer: A

• Question 3:

  Which two statements are correct about global security policies? (choose two)

  A. Global based policies can reference the destination zone

  B. Global based policies can reference the source zone

  C. Global based policies must reference a dynamic application

  D. Global based policies must reference the source and destination zones

  Correct Answer: AB

• Question 4:

  Which two statements are correct about security zones? (choose two)

  A. Security zones use packet filters to prevent communication between management ports

  B. Security zones use security policies that enforce rules for the transit traffic

  C. Security zones use a stateful firewall to provide secure network connections

  D. Security zones use address books to link username to IP addresses.

  Correct Answer: BC

• Question 5:

  When configuring IPsec VPNs, setting a hash algorithm solves which security concern?

  A. Encryption

  B. Integrity

  C. Availability

  D. Redundancy

  Correct Answer: B

• Question 6:

  What is a characteristic of the Junos enhanced Web filtering solution ?

  A. The SRX series device intercepts HTTP and HTTPS request and send the source IP address to the on-premises Websense server

  B. The Websense cloud resolves the categorized URLs to IP addresses by performing a DNS reverse loockup

  C. The Websense cloud categorize the URLs and also provide site reputation information.

  D. Junos Enhanced Web filtering allows the SRX series device to categorize URLs using an on- premises websense server.

  Correct Answer: D

• Question 7:

  Click the Exhibit button

  

  You have configured source ... Being received By the SRX series Which features must be configured

  A. Port Forwarding

  B. Destination NAT

  C. Proxy ARP

  D. Reverse static NAT

  Correct Answer: C

• Question 8:

  What does IPsec use to negotiate encryption algorithms?

  A. TLS

  B. AH

  C. ESP

  D. IKE

  Correct Answer: C

• Question 9:

  What is a type of security feed that Sky ATP provides to a vSRX series device by default?

  A. CandC feeds

  B. Malware feeds

  C. RSS feeds

  D. ACL feeds

  Correct Answer: A

• Question 10:

  Which source NAT rule set would be used when a packet matches the conditions in multiple rule sets?.

  A. The most specific rule set will be used

  B. The least specific rule set will be used

  C. The first rule set matched will be used

  D. The last rule set matched will be used

  Correct Answer: C