Juniper JN0-230 Online Practice Questions and Exam Preparation

Juniper JN0-230 Online Questions & Answers

• Question 51:

  What must you do first to use the Monitor/Events workspace in the j-Web interface?

  A. You must enable stream mode security logging on the SRX Series device
  B. You must enable event mode security logging on the SRX Series device.
  C. You must enable security logging that uses the SD-Syslog format.
  D. You must enable security logging that uses the TLS transport mode.
  B. You must enable event mode security logging on the SRX Series device.

• Question 52:

  Click the Exhibit button

  

  Which two user roles shown in the exhibit are available be defaults? (choose two)

  A. Operator
  B. Jtac
  C. Super-user
  D. Admin
  A. Operator
  C. Super-user

• Question 53:

  What is the correct order of processing when configuring NAT rules and security policies?

  A. Policy lookup > source NAT > static NAT > destination NAT
  B. Source NAT > static NAT > destination NAT > policy lookup
  C. Static NAT > destination NAT> policy lookup > source NAT
  D. Destination NAT > policy lookup > source NAT > static NAT
  C. Static NAT > destination NAT> policy lookup > source NAT

• Question 54:

  Which statements is correct about global security policies?

  A. Global policies allow you to regulate traffic with addresses and applications, regardless of their security zones.
  B. Traffic matching global is not added to the session table.
  C. Global policies eliminate the need to assign interface to security zones.
  D. Global security require you to identify a source and destination zone.
  A. Global policies allow you to regulate traffic with addresses and applications, regardless of their security zones.

• Question 55:

  You have created a zones-based security policy that permits traffic to a specific webserver for the marketing team. Other groups in the company are not permitted to access the webserver. When marketing users attempt to access the server they are unable to do so. What are two reasons for this access failure? (Choose two.)

  A. You failed to change the source zone to include any source zone.
  B. You failed to position the policy after the policy that denies access to the webserver.
  C. You failed to commit the policy change.
  D. You failed to position the policy before the policy that denies access the webserver
  C. You failed to commit the policy change.
  D. You failed to position the policy before the policy that denies access the webserver

• Question 56:

  Which zone is considered a functional zone?

  A. Trust
  B. Junos host
  C. Null
  D. Management
  D. Management

• Question 57:

  When configuring IPsec VPNs, setting a hash algorithm solves which security concern?

  A. Encryption
  B. Integrity
  C. Availability
  D. Redundancy
  B. Integrity

• Question 58:

  Which flow module components handles processing for UTM?

  A. Policy
  B. Zones
  C. Services
  D. Screen options
  C. Services

• Question 59:

  Which two statements are true regarding zone-based security policies? (Choose two.)

  A. Zone-based policies must reference a source address in the match criteria.
  B. Zone-based policies must reference a URL category in the match criteria.
  C. Zone-based policies must reference a destination address in the match criteria
  D. Zone-based policies must reference a dynamic application in the match criteria.
  A. Zone-based policies must reference a source address in the match criteria.
  C. Zone-based policies must reference a destination address in the match criteria

• Question 60:

  Which two notifications are available when the antivirus engine detects and infected file? (Choose two.)

  A. e-mail notifications
  B. SNMP notifications
  C. SMS notifications
  D. Protocol-only notification
  A. e-mail notifications
  D. Protocol-only notification