Juniper Associate JNCIA-SEC JN0-230 Questions & Answers

• Question 41:

  The free licensing model for Sky ATP includes which features? (Choose two.)

  A. C and C feeds

  B. Infected host blocking

  C. Executable file inspection

  D. Compromised endpoint dashboard

  Correct Answer: BC

• Question 42:

  Which two feature on the SRX Series device are common across all Junos devices? (Choose two.)

  A. Stateless firewall filters

  B. UTM services

  C. The separation of control and forwarding planes

  D. screens

  Correct Answer: AC

• Question 43:

  Which security object defines a source or destination IP address that is used for an employee Workstation?

  A. Zone

  B. Screen

  C. Address book entry

  D. scheduler

  Correct Answer: C

• Question 44:

  What are two characteristic of static NAT SRX Series devices? (Choose two.)

  A. Source and destination NAT rules take precedence over static NAT rules.

  B. A reverse mapping rule is automatically created for the source translation.

  C. Static NAT rule take precedence over source and destination NAT rules.

  D. Static rules cannot coexist with destination NAT rules on the same SRX Series device configuration.

  Correct Answer: BC

• Question 45:

  Which two elements are needed on an SRX Series device to set up a remote syslog server? (Choose two.)

  A. Data type

  B. Data throughput

  C. IP address

  D. Data size

  Correct Answer: AC

• Question 46:

  Which security feature is applied to traffic on an SRX Series device when the device is running n packet mode?

  A. Sky ATP

  B. ALGs

  C. Firewall filters

  D. Unified policies

  Correct Answer: C

• Question 47:

  What is the purpose of the Shadow Policies workspace in J-Web?

  A. The Shadow Policies workspace shows unused security policies due to policy overlap.

  B. The Shadow Policies workspace shows unused IPS policies due to policy overlap.

  C. The Shadow Policies workspace shows used security policies due to policy overlap

  D. The Shadow Policies workspace shows used IPS policies due to policy overlap

  Correct Answer: A

• Question 48:

  Which two statements are true about security policy actions? (Choose two.)

  A. The reject action drops the traffic and sends a message to the source device.

  B. The deny action silently drop the traffic.

  C. The deny action drops the traffic and sends a message to the source device.

  D. The reject action silently drops the traffic.

  Correct Answer: AB

• Question 49:

  You are designing a new security policy on an SRX Series device. You must block an application and log all occurrence of the application access attempts. In this scenario, which two actions must be enabled in the security policy? (Choose two.)

  A. Log the session initiations

  B. Enable a reject action

  C. Log the session closures

  D. Enable a deny action

  Correct Answer: AD

• Question 50:

  Which statements is correct about global security policies?

  A. Global policies allow you to regulate traffic with addresses and applications, regardless of their security zones.

  B. Traffic matching global is not added to the session table.

  C. Global policies eliminate the need to assign interface to security zones.

  D. Global security require you to identify a source and destination zone.

  Correct Answer: A