Juniper JN0-230 Online Practice Questions and Exam Preparation

Juniper JN0-230 Online Questions & Answers

• Question 61:

  Which two segments describes IPsec VPNs? (Choose two.)

  A. IPsec VPN traffic is always authenticated.
  B. IPsec VPN traffic is always encrypted.
  C. IPsec VPNs use security to secure traffic over a public network between two remote sites.
  D. IPsec VPNs are dedicated physical connections between two private networks.
  A. IPsec VPN traffic is always authenticated.
  C. IPsec VPNs use security to secure traffic over a public network between two remote sites.

• Question 62:

  Which management software supports metadata-based security policies that are ideal for cloud deployments?

  A. Security Director
  B. J-Web
  C. Network Director
  D. Sky Enterprise
  A. Security Director

• Question 63:

  You want to integrate an SRX Series device with SKY ATP. What is the first action to accomplish task?

  A. Issue the commit script to register the SRX Series device.
  B. Copy the operational script from the Sky ATP Web UI.
  C. Create an account with the Sky ATP Web UI.
  D. Create the SSL VPN tunnel between the SRX Series device and Sky ATP.
  C. Create an account with the Sky ATP Web UI.

• Question 64:

  What is a type of security feed that Sky ATP provides to a vSRX series device by default?

  A. CandC feeds
  B. Malware feeds
  C. RSS feeds
  D. ACL feeds
  A. CandC feeds

• Question 65:

  Which security feature is applied to traffic on an SRX Series device when the device is running n packet mode?

  A. Sky ATP
  B. ALGs
  C. Firewall filters
  D. Unified policies
  C. Firewall filters

• Question 66:

  You are designing a new security policy on an SRX Series device. You must block an application and log all occurrence of the application access attempts. In this scenario, which two actions must be enabled in the security policy? (Choose two.)

  A. Log the session initiations
  B. Enable a reject action
  C. Log the session closures
  D. Enable a deny action
  A. Log the session initiations
  D. Enable a deny action

• Question 67:

  Exhibit.

  

  Which two statements are true? (Choose two.)

  A. Logs for this security policy are generated.
  B. Logs for this security policy are not generated.
  C. Traffic static for this security policy are not generated.
  D. Traffic statistics for this security policy are generated.
  A. Logs for this security policy are generated.
  D. Traffic statistics for this security policy are generated.

• Question 68:

  Which Statement is correct about Sky ATP?

  A. The local Sky ATP platform downloads the latest threat from managed site
  B. Sky ATP can provide live threat feeds to SRX series devices
  C. Sky ATP is a local hardware-based security threat analyzer that performs multiple tasks.
  D. Sky ATP relies on the SRX series device to open and analyze suspect file attachments
  B. Sky ATP can provide live threat feeds to SRX series devices

• Question 69:

  What should you configure if you want to translate private source IP address to a single public IP address?

  A. Source NAT
  B. Destination NAT
  C. Content filtering
  D. Security Director
  A. Source NAT

• Question 70:

  Host-inbound-traffic is configured on the DMZ zone and the ge-0/0/9.0 interface attached to that zone. Referring to the exhibit,

  

  which to types of management traffic would be performed on the SRX Series device? (Choose two.)

  A. HTTPS
  B. SSH
  C. Finger
  D. HTTP
  B. SSH
  D. HTTP