Juniper Associate JNCIA-SEC JN0-230 Questions & Answers

• Question 11:

  Which Statement is correct about Sky ATP?

  A. The local Sky ATP platform downloads the latest threat from managed site

  B. Sky ATP can provide live threat feeds to SRX series devices

  C. Sky ATP is a local hardware-based security threat analyzer that performs multiple tasks.

  D. Sky ATP relies on the SRX series device to open and analyze suspect file attachments

  Correct Answer: B

• Question 12:

  Click the exhibit button

  

  You are configuring an IPsec VPN for the network show in the exhibit Which feature must be enabled the VPN to established successfully?

  A. Main mode must be configured on the IKE gateway

  B. Main mode must be configured on the IPsec VPN

  C. Aggressive mode must be configured on the IPsec VPN

  D. Aggressive mode must be configured on IKE gateway

  Correct Answer: D

• Question 13:

  Click the Exhibit button

  

  Which two user roles shown in the exhibit are available be defaults? (choose two)

  A. Operator

  B. Jtac

  C. Super-user

  D. Admin

  Correct Answer: AC

• Question 14:

  Which zone is considered a functional zone?

  A. Trust

  B. Junos host

  C. Null

  D. Management

  Correct Answer: D

• Question 15:

  You want to deploy, manage, and configure multiple SRX series devices without an on-premises software solution which solution would satisfy this requirement?

  A. Junos Space Network Director

  B. Juniper Sky Enterprise

  C. Juniper Sky ATP

  D. Juniper Advanced Threat Prevention.

  Correct Answer: D

• Question 16:

  What is the definition of zone on an SRX series devices?

  A. A collection of one or more network segments with different security requirements

  B. An individual logical interface with a private IP address

  C. An individual logical interface with a public IP address

  D. A collection of one or more network segment sharing similar security requirements.

  Correct Answer: D

• Question 17:

  Which two statements about security policy processing on SRX series devices are true? (choose two)

  A. Zone-Based security policies are processed before global policies.

  B. Traffic matching a global policy cannot be processed against a firewall filter

  C. Zone-Based security policies are processed after global policies

  D. Traffic matching a zone-based policy is not processed against global polices.

  Correct Answer: AC

• Question 18:

  You have configured a Web filtering UTM policy?

  Which action must be performed before the Web filtering UTM policy takes effect?

  A. The UTM policy must be linked to an egress interface

  B. The UTM policy be configured as a routing next hop.

  C. The UTM policy must be linked to an ingress interface.

  D. The UTM policy must be linked to a security policy

  Correct Answer: D

• Question 19:

  Which two actions are performed on an incoming packet matching an existing session? (Choose two.)

  A. Zone processing

  B. Security policy evolution

  C. Service ALG processing

  D. Screens processing

  Correct Answer: CD

• Question 20:

  Which two statements are correct about functional zones? (Choose two.)

  A. A functional zone uses security policies to enforce rules for transit traffic.

  B. Traffic received on the management interface in the functional zone cannot transit out other interface.

  C. Functional zones separate groups of users based on their function.

  D. A function is used for special purpose, such as management interface

  Correct Answer: BD