Juniper JN0-231 Online Practice Questions and Exam Preparation

Juniper JN0-231 Online Questions & Answers

• Question 31:

  Which two statements are correct about IPsec security associations? (Choose two.)

  A. IPsec security associations are bidirectional.
  B. IPsec security associations are unidirectional.
  C. IPsec security associations are established during IKE Phase 1 negotiations.
  D. IPsec security associations are established during IKE Phase 2 negotiations.
  A. IPsec security associations are bidirectional.
  D. IPsec security associations are established during IKE Phase 2 negotiations.

• Question 32:

  You are deploying an SRX Series firewall with multiple NAT scenarios. In this situation, which NAT scenario takes priority?

  A. interface NAT
  B. source NAT
  C. static NAT
  D. destination NAT
  A. interface NAT

• Question 33:

  SRX Series devices have a maximum of how many rollback configurations?

  A. 40
  B. 60
  C. 50
  D. 10
  C. 50

• Question 34:

  Which two features are included with UTM on an SRX Series device? (Choose two.)

  A. antivirus
  B. NAT
  C. IDP
  D. content filtering
  A. antivirus
  D. content filtering

• Question 35:

  You have configured a UTM feature profile.

  Which two additional configuration steps are required for your UTM feature profile to take effect? (Choose two.)

  A. Associate the UTM policy with an address book.
  B. Associate the UTM policy with a firewall filter.
  C. Associate the UTM policy with a security policy.
  D. Associate the UTM feature profile with a UTM policy.
  C. Associate the UTM policy with a security policy.
  D. Associate the UTM feature profile with a UTM policy.

• Question 36:

  What are two valid address books? (Choose two.)

  A. 66.129.239.128/25
  B. 66.129.239.154/24
  C. 66.129.239.0/24
  D. 66.129.239.50/25
  A. 66.129.239.128/25
  C. 66.129.239.0/24

• Question 37:

  You are assigned a project to configure SRX Series devices to allow connections to your webservers. The webservers have a private IP address, and the packets must use NAT to be accessible from the

  Internet. You do not want the webservers to initiate connections with external update servers on the Internet using the same IP address as customers use to access them.

  Which two NAT types must be used to complete this project? (Choose two.)

  A. static NAT
  B. hairpin NAT
  C. destination NAT
  D. source NAT
  C. destination NAT
  D. source NAT

• Question 38:

  Click the Exhibit button.

  

  You are asked to allow only ping and SSH access to the security policies shown in the exhibit. Which statement will accomplish this task?

  A. Rename policy Rule-2 to policy Rule-0.
  B. Insert policy Rule-2 before policy Rule-1.
  C. Replace application any with application [junos-ping junos-ssh] in policy Rule-1.
  D. Rename policy Rule-1 to policy Rule-3.
  B. Insert policy Rule-2 before policy Rule-1.

• Question 39:

  Which two statements are correct about screens? (Choose two.)

  A. Screens process inbound packets.
  B. Screens are processed on the routing engine.
  C. Screens process outbound packets.
  D. Screens are processed on the flow module.
  A. Screens process inbound packets.
  D. Screens are processed on the flow module.

• Question 40:

  Which statement is correct about unified security policies on an SRX Series device?

  A. A zone-based policy is always evaluated first.
  B. The most restrictive policy is applied regardless of the policy level.
  C. A global policy is always evaluated first.
  D. The first policy rule is applied regardless of the policy level.
  A. A zone-based policy is always evaluated first.