Juniper Associate JNCIA-SEC JN0-230 Questions & Answers

• Question 31:

  Firewall filters define which type of security?

  A. Stateful

  B. Stateless

  C. NGFW

  D. Dynamic enforcement

  Correct Answer: B

• Question 32:

  Which method do VPNs use to prevent outside parties from viewing packet in clear text?

  A. Integrity

  B. Authentication

  C. Encryption

  D. NAT_T

  Correct Answer: C

• Question 33:

  Your company uses SRX Series devices to secure the edge of the network. You are asked protect the

  company from ransom ware attacks.

  Which solution will satisfy this requirement?

  A. Sky ATP

  B. AppSecure

  C. Unified security policies

  D. screens

  Correct Answer: A

• Question 34:

  Exhibit.

  

  Which two statements are true? (Choose two.)

  A. Logs for this security policy are generated.

  B. Logs for this security policy are not generated.

  C. Traffic static for this security policy are not generated.

  D. Traffic statistics for this security policy are generated.

  Correct Answer: AD

• Question 35:

  Which actions would be applied for the pre-ID default policy unified policies?

  A. Redirect the session

  B. Reject the session

  C. Log the session

  D. Silently drop the session

  Correct Answer: C

• Question 36:

  Which statements about NAT are correct? (Choose two.)

  A. When multiple NAT rules have overlapping match conditions, the rule listed first is chosen.

  B. Source NAT translates the source port and destination IP address.

  C. Source NAT translates the source IP address of packet.

  D. When multiple NAT rules have overlapping match conditions, the most specific rule is chosen.

  Correct Answer: AC

• Question 37:

  Which two statements are true about UTM on an SRX340? (Choose two.)

  A. A default UTM policy is created.

  B. No default profile is created.

  C. No default UTM policy is created

  D. A default UTM profile is created

  Correct Answer: BC

• Question 38:

  What must you do first to use the Monitor/Events workspace in the j-Web interface?

  A. You must enable stream mode security logging on the SRX Series device

  B. You must enable event mode security logging on the SRX Series device.

  C. You must enable security logging that uses the SD-Syslog format.

  D. You must enable security logging that uses the TLS transport mode.

  Correct Answer: B

• Question 39:

  You want to generate reports from the l-Web on an SRX Series device. Which logging mode would you use in this scenario?

  A. Syslog

  B. Stream

  C. Event

  D. local

  Correct Answer: B

• Question 40:

  Which two statements are true regarding zone-based security policies? (Choose two.)

  A. Zone-based policies must reference a source address in the match criteria.

  B. Zone-based policies must reference a URL category in the match criteria.

  C. Zone-based policies must reference a destination address in the match criteria

  D. Zone-based policies must reference a dynamic application in the match criteria.

  Correct Answer: AC