JN0-231 Real Exam Questions and Verified Answers

Question 1 Single choice

What does the number "2" indicate in interface ge-0/1/2?

A
the physical interface card (PIC)
B
the flexible PIC concentrator (FPC)
C
the interface logical number
D
the port number

Show answer and explanation

Correct answer: D

Question 2 Multiple choice

Which two statements are correct about the integrated user firewall feature?(Choose two.)

A
It maps IP addresses to individual users.
B
It supports IPv4 addresses.
C
It allows tracking of non-Windows Active Directory users.
D
It uses the LDAP protocol.

Show answer and explanation

Correct answers: A, C

Question 3 Single choice

When creating a site-to-site VPN using the J-Web shown in the exhibit, which statement is correct?

A
The remote gateway is configured automatically based on the local gateway settings.
B
RIP, OSPF, and BGP are supported under Routing mode.
C
The authentication method is pre-shared key or certificate based.
D
Privately routable IP addresses are required.

Show answer and explanation

Correct answer: D

Question 4 Multiple choice

Which two security features inspect traffic at Layer 7? (Choose two.)

A
IPS/IDP
B
security zones
C
application firewall
D
integrated user firewall

Show answer and explanation

Correct answers: A, C

Question 5 Single choice

Which statement about global NAT address persistence is correct?

A
The same IP address from a source NAT pool will be assigned for all sessions from a given host.
B
The same IP address from a source NAT pool is not guaranteed to be assigned for all sessions from a given host.
C
The same IP address from a destination NAT pool will be assigned for all sessions for a given host.
D
The same IP address from a destination NAT pool is not guaranteed to be assigned for all sessions for a given host.

Show answer and explanation

Correct answer: A

Question 6 Single choice

SRX Series devices have a maximum of how many rollback configurations?

A
40
B
60
C
50
D
10

Show answer and explanation

Correct answer: C

Question 7 Single choice

Which statement is correct about unified security policies on an SRX Series device?

A
A zone-based policy is always evaluated first.
B
The most restrictive policy is applied regardless of the policy level.
C
A global policy is always evaluated first.
D
The first policy rule is applied regardless of the policy level.

Show answer and explanation

Correct answer: A

Question 8 Single choice

What is the order in which malware is detected and analyzed?

A
antivirus scanning ?gt; cache lookup ?gt; dynamic analysis ?gt; static analysis
B
cache lookup ?gt; antivirus scanning ?gt; static analysis ?gt; dynamic analysis
C
antivirus scanning ?gt; cache lookup ?gt; static analysis ?gt; dynamic analysis
D
cache lookup ?gt; static analysis ?gt; dynamic analysis ?gt; antivirus scanning

Show answer and explanation

Correct answer: B

Question 9 Single choice

Which statement is correct about global security policies on SRX Series devices?

A
The to-zone any command configures a global policy.
B
The from-zone any command configures a global policy.
C
Global policies are always evaluated first.
D
Global policies can include zone context.

Show answer and explanation

Correct answer: D

Question 10 Single choice

You are assigned a project to configure SRX Series devices to allow connections to your webservers. The webservers have a private IP address, and the packets must use NAT to be accessible from the Internet.
The webservers must use the same address for both connections from the Internet and communication with update servers.

Which NAT type must be used to complete this project?

A
source NAT
B
destination NAT
C
static NAT
D
hairpin NAT

Show answer and explanation

Correct answer: C