Juniper JN0-231 Online Practice Questions and Exam Preparation

Juniper JN0-231 Online Questions & Answers

• Question 11:

  You are installing a new SRX Series device and you are only provided one IP address from your ISP. In this scenario, which NAT solution would you implement?

  A. pool-based NAT with PAT
  B. pool-based NAT with address shifting
  C. interface-based source NAT
  D. pool-based NAT without PAT
  C. interface-based source NAT

• Question 12:

  Which three Web filtering deployment actions are supported by Junos? (Choose three.)

  A. Use IPS.
  B. Use local lists.
  C. Use remote lists.
  D. Use Websense Redirect.
  E. Use Juniper Enhanced Web Filtering.
  B. Use local lists.
  D. Use Websense Redirect.
  E. Use Juniper Enhanced Web Filtering.

• Question 13:

  Which two statements are correct about IKE security associations? (Choose two.)

  A. IKE security associations are established during IKE Phase 1 negotiations.
  B. IKE security associations are unidirectional.
  C. IKE security associations are established during IKE Phase 2 negotiations.
  D. IKE security associations are bidirectional.
  A. IKE security associations are established during IKE Phase 1 negotiations.
  D. IKE security associations are bidirectional.

• Question 14:

  Which Juniper ATP feed provides a dynamic list of known botnet servers and known sources of malware downloads?

  A. infected host cloud feed
  B. Geo IP feed
  C. CandC cloud feed
  D. blocklist feed
  A. infected host cloud feed

• Question 15:

  Which two IKE Phase 1 configuration options must match on both peers to successfully establish a tunnel? (Choose two.)

  A. VPN name
  B. gateway interfaces
  C. IKE mode
  D. Diffie-Hellman group
  C. IKE mode
  D. Diffie-Hellman group

• Question 16:

  You want to block executable files ("exe) from being downloaded onto your network. Which UTM feature would you use in this scenario?

  A. IPS
  B. Web filtering
  C. content filtering
  D. antivirus
  B. Web filtering

• Question 17:

  An application firewall processes the first packet in a session for which the application has not yet been identified. In this scenario, which action does the application firewall take on the packet?

  A. It allows the first packet.
  B. It denies the first packet and sends an error message to the user.
  C. It denies the first packet.
  D. It holds the first packet until the application is identified.
  D. It holds the first packet until the application is identified.

• Question 18:

  Which statement is correct about static NAT?

  A. Static NAT supports port translation.
  B. Static NAT rules are evaluated after source NAT rules.
  C. Static NAT implements unidirectional one-to-one mappings.
  D. Static NAT implements unidirectional one-to-many mappings.
  C. Static NAT implements unidirectional one-to-one mappings.

• Question 19:

  The UTM features are performed during which process of the SRX Series device's packet flow?

  A. services
  B. security policies
  C. zones
  D. screens
  A. services

• Question 20:

  When transit traffic matches a security policy, which three actions are available? (Choose three.)

  A. Allow
  B. Discard
  C. Deny
  D. Reject
  E. Permit
  C. Deny
  D. Reject
  E. Permit