Juniper JN0-231 Online Practice Questions and Exam Preparation

Juniper JN0-231 Online Questions & Answers

• Question 71:

  Which two criteria should a zone-based security policy include? (Choose two.)

  A. a source port
  B. a destination port
  C. zone context
  D. an action
  A. a source port
  B. a destination port

• Question 72:

  You are creating Ipsec connections.

  In this scenario, which two statements are correct about proxy IDs? (Choose two.)

  A. Proxy IDs are used to configure traffic selectors.
  B. Proxy IDs are optional for Phase 2 session establishment.
  C. Proxy IDs must match for Phase 2 session establishment.
  D. Proxy IDs default to 0.0.0.0/0 for policy-based VPNs.
  A. Proxy IDs are used to configure traffic selectors.
  B. Proxy IDs are optional for Phase 2 session establishment.

• Question 73:

  When are Unified Threat Management services performed in a packet flow?

  A. before security policies are evaluated
  B. as the packet enters an SRX Series device
  C. only during the first path process
  D. after network address translation
  D. after network address translation

• Question 74:

  Which two components are configured for host inbound traffic? (Choose two.)

  A. zone
  B. logical interface
  C. physical interface
  D. routing instance
  A. zone
  B. logical interface

• Question 75:

  When operating in packet mode, which two services are available on the SRX Series device? (Choose two.)

  A. MPLS
  B. UTM
  C. CoS
  D. IDP
  A. MPLS
  C. CoS

• Question 76:

  You are configuring an SRX Series device. You have a set of servers inside your private network that need one-to-one mappings to public IP addresses. Which NAT configuration is appropriate in this scenario?

  A. source NAT with PAT
  B. destination NAT
  C. NAT-T
  D. static NAT
  D. static NAT

• Question 77:

  Which security policy type will be evaluated first?

  A. A zone policy with no dynamic application set
  B. A global with no dynamic application set
  C. A zone policy with a dynamic application set
  D. A global policy with a dynamic application set
  D. A global policy with a dynamic application set

• Question 78:

  Which Juniper Networks solution uses static and dynamic analysis to search for day-zero malware threats?

  A. firewall filters
  B. UTM
  C. Juniper ATP Cloud
  D. IPS
  C. Juniper ATP Cloud

• Question 79:

  Click the Exhibit button.

  

  Referring to the exhibit, which two statements are correct about the ping command? (Choose two.)

  A. The DMZ routing-instance is the source.
  B. The 10.10.102.10 IP address is the source.
  C. The 10.10.102.10 IP address is the destination.
  D. The DMZ routing-instance is the destination.
  A. The DMZ routing-instance is the source.
  C. The 10.10.102.10 IP address is the destination.

• Question 80:

  Which two statements about the Junos OS CLI are correct? (Choose two.)

  A. The default configuration requires you to log in as the admin user.
  B. A factory-default login assigns the hostname Amnesiac to the device.
  C. Most Juniper devices identify the root login prompt using the % character.
  D. Most Juniper devices identify the root login prompt using the > character.
  A. The default configuration requires you to log in as the admin user.
  D. Most Juniper devices identify the root login prompt using the > character.