Juniper JN0-231 Online Practice Questions and Exam Preparation

Juniper JN0-231 Online Questions & Answers

• Question 91:

  What is the default timeout value for TCP sessions on an SRX Series device?

  A. 30 seconds
  B. 60 minutes
  C. 60 seconds
  D. 30 minutes
  D. 30 minutes

• Question 92:

  Which two IPsec hashing algorithms are supported on an SRX Series device? (Choose two.)

  A. SHA-1
  B. SHAKE128
  C. MD5
  D. RIPEMD-256
  A. SHA-1
  C. MD5

• Question 93:

  What information does the show chassis routing-engine command provide?

  A. chassis serial number
  B. resource utilization
  C. system version
  D. routing tables
  B. resource utilization

• Question 94:

  Which two statements are correct about the null zone on an SRX Series device? (Choose two.)

  A. The null zone is created by default.
  B. The null zone is a functional security zone.
  C. Traffic sent or received by an interface in the null zone is discarded.
  D. You must enable the null zone before you can place interfaces into it.
  A. The null zone is created by default.
  C. Traffic sent or received by an interface in the null zone is discarded.

• Question 95:

  Your ISP gives you an IP address of 203.0.113.0/27 and informs you that your default gateway is 203.0.113.1. You configure destination NAT to your internal server, but the requests sent to the webserver at 203.0.113.5 are not arriving at the server.

  In this scenario, which two configuration features need to be added? (Choose two.)

  A. firewall filter
  B. security policy
  C. proxy-ARP
  D. UTM policy
  B. security policy
  C. proxy-ARP

• Question 96:

  What does the number `'2'' indicate in interface ge--0/1/2?

  A. The interface logical number
  B. The physical interface card (PIC)
  C. The port number
  D. The flexible PIC concentrator (FPC)
  C. The port number

• Question 97:

  Click the Exhibit button.

  

  Which two statements are correct about the partial policies shown in the exhibit? (Choose two.)

  A. UDP traffic matched by the deny-all policy will be silently dropped.
  B. TCP traffic matched by the reject-all policy will have a TCP RST sent.
  C. TCP traffic matched from the zone trust is allowed by the permit-all policy.
  D. UDP traffic matched by the reject-all policy will be silently dropped.
  A. UDP traffic matched by the deny-all policy will be silently dropped.
  B. TCP traffic matched by the reject-all policy will have a TCP RST sent.

• Question 98:

  In J-Web. the management and loopback address configuration option allows you to configure which area?

  A. the IP address of the primary Gigabit Ethernet port
  B. the IP address of the Network Time Protocol server
  C. the CIDR address
  D. the IP address of the device management port
  D. the IP address of the device management port

• Question 99:

  You have an FTP server and a webserver on the inside of your network that you want to make available to users outside of the network. You are allocated a single public IP address. In this scenario, which two NAT elements should you configure? (Choose two.)

  A. destination NAT
  B. NAT pool
  C. source NAT
  D. static NAT
  A. destination NAT
  B. NAT pool

• Question 100:

  You are asked to configure your SRX Series device to block all traffic from certain countries. The solution must be automatically updated as IP prefixes become allocated to those certain countries.

  Which Juniper ATP solution will accomplish this task?

  A. Geo IP
  B. unified security policies
  C. IDP
  D. CandC feed
  A. Geo IP