Juniper JN0-231 Online Practice Questions and Exam Preparation

Juniper JN0-231 Online Questions & Answers

• Question 21:

  Which statement is correct about Web filtering?

  A. The Juniper Enhanced Web Filtering solution requires a locally managed server.
  B. The decision to permit or deny is based on the body content of an HTTP packet.
  C. The decision to permit or deny is based on the category to which a URL belongs.
  D. The client can receive an e-mail notification when traffic is blocked.
  C. The decision to permit or deny is based on the category to which a URL belongs.

• Question 22:

  Which two components are part of a security zone? (Choose two.)

  A. inet.0
  B. fxp0
  C. address book
  D. ge-0/0/0.0
  B. fxp0
  D. ge-0/0/0.0

• Question 23:

  What is the order of the first path packet processing when a packet enters a device?

  A. security policies ?gt; screens ?gt; zones
  B. screens ?gt; security policies ?gt; zones
  C. screens ?gt; zones ?gt; security policies
  D. security policies ?gt; zones ?gt; screens
  C. screens ?gt; zones ?gt; security policies

• Question 24:

  You want to verify the peer before IPsec tunnel establishment. What would be used as a final check in this scenario?

  A. traffic selector
  B. perfect forward secrecy
  C. st0 interfaces
  D. proxy ID
  D. proxy ID

• Question 25:

  Which two traffic types are considered exception traffic and require some form of special handling by the PFE? (Choose two.)

  A. SSH sessions
  B. ICMP reply messages
  C. HTTP sessions
  D. traceroute packets
  B. ICMP reply messages
  D. traceroute packets

• Question 26:

  Click the Exhibit button.

  

  Referring to the exhibit, a user is placed in which hierarchy when the exit command is run?

  A. [edit security policies from-zone trust to-zone dmz] user@vSRX-1#
  B. [edit] user@vSRX-1#
  C. [edit security policies] user@vSRX-1#
  D. user@vSRX-1>
  A. [edit security policies from-zone trust to-zone dmz] user@vSRX-1#

• Question 27:

  What is an IP addressing requirement for an IPsec VPN using main mode?

  A. One peer must have dynamic IP addressing.
  B. One peer must have static IP addressing.
  C. Both peers must have dynamic IP addresses.
  D. Both peers must have static IP addressing.
  D. Both peers must have static IP addressing.

• Question 28:

  You are monitoring an SRX Series device that has the factory-default configuration applied.

  In this scenario, where are log messages sent by default?

  A. Junos Space Log Director
  B. Junos Space Security Director
  C. to a local syslog server on the management network
  D. to a local log file named messages
  C. to a local syslog server on the management network

• Question 29:

  Your company is adding IP cameras to your facility to increase physical security. You are asked to help protect these loT devices from becoming zombies in a DDoS attack.

  Which Juniper ATP feature should you configure to accomplish this task?

  A. IPsec
  B. static NAT
  C. allowlists
  D. CandC feeds
  D. CandC feeds

• Question 30:

  What is the default value of the dead peer detection (DPD) interval for an IPsec VPN tunnel?

  A. 20 seconds
  B. 5 seconds
  C. 10 seconds
  D. 40 seconds
  B. 5 seconds