Juniper JN0-230 Online Practice Questions and Exam Preparation

Juniper JN0-230 Online Questions & Answers

• Question 1:

  What is the behavior of an SRX series device when UDP and TCP is rejected by a security policy actions? (choose two)

  A. The reject action drops UDP packets and sends an ICMP message to the source
  B. The reject actions drops TCP packets and sends an ICMP message to the source
  C. The reject action drops UDP packets and does not send ant message to the source
  D. The reject action drops TCP packets and send an RST message to the source.
  A. The reject action drops UDP packets and sends an ICMP message to the source
  D. The reject action drops TCP packets and send an RST message to the source.

• Question 2:

  Which statements describes stateless firewalls on SRX series devices?

  A. Each packet is analyzed by firewall filters
  B. Each packet is analyzed based on application layer security
  C. Each packet is analyzed based on source zone
  D. Each packet is analyzed as part of a session.
  A. Each packet is analyzed by firewall filters

• Question 3:

  Which two statements are correct about global security policies? (choose two)

  A. Global based policies can reference the destination zone
  B. Global based policies can reference the source zone
  C. Global based policies must reference a dynamic application
  D. Global based policies must reference the source and destination zones
  A. Global based policies can reference the destination zone
  B. Global based policies can reference the source zone

• Question 4:

  Which two statements are correct about security zones? (choose two)

  A. Security zones use packet filters to prevent communication between management ports
  B. Security zones use security policies that enforce rules for the transit traffic
  C. Security zones use a stateful firewall to provide secure network connections
  D. Security zones use address books to link username to IP addresses.
  B. Security zones use security policies that enforce rules for the transit traffic
  C. Security zones use a stateful firewall to provide secure network connections

• Question 5:

  When configuring IPsec VPNs, setting a hash algorithm solves which security concern?

  A. Encryption
  B. Integrity
  C. Availability
  D. Redundancy
  B. Integrity

• Question 6:

  What is a characteristic of the Junos enhanced Web filtering solution ?

  A. The SRX series device intercepts HTTP and HTTPS request and send the source IP address to the on-premises Websense server
  B. The Websense cloud resolves the categorized URLs to IP addresses by performing a DNS reverse loockup
  C. The Websense cloud categorize the URLs and also provide site reputation information.
  D. Junos Enhanced Web filtering allows the SRX series device to categorize URLs using an on- premises websense server.
  D. Junos Enhanced Web filtering allows the SRX series device to categorize URLs using an on- premises websense server.

• Question 7:

  Click the Exhibit button

  

  You have configured source ... Being received By the SRX series Which features must be configured

  A. Port Forwarding
  B. Destination NAT
  C. Proxy ARP
  D. Reverse static NAT
  C. Proxy ARP

• Question 8:

  What is a type of security feed that Sky ATP provides to a vSRX series device by default?

  A. CandC feeds
  B. Malware feeds
  C. RSS feeds
  D. ACL feeds
  A. CandC feeds

• Question 9:

  What does IPsec use to negotiate encryption algorithms?

  A. TLS
  B. AH
  C. ESP
  D. IKE
  C. ESP

• Question 10:

  Which source NAT rule set would be used when a packet matches the conditions in multiple rule sets?.

  A. The most specific rule set will be used
  B. The least specific rule set will be used
  C. The first rule set matched will be used
  D. The last rule set matched will be used
  C. The first rule set matched will be used