Juniper JN0-231 Online Practice Questions and Exam Preparation

Juniper JN0-231 Online Questions & Answers

• Question 81:

  Which two security features inspect traffic at Layer 7? (Choose two.)

  A. IPS/IDP
  B. security zones
  C. application firewall
  D. integrated user firewall
  A. IPS/IDP
  C. application firewall

• Question 82:

  Screens on an SRX Series device protect against which two types of threats? (Choose two.)

  A. IP spoofing
  B. ICMP flooding
  C. zero-day outbreaks
  D. malicious e-mail attachments
  A. IP spoofing
  B. ICMP flooding

• Question 83:

  Which statement about service objects is correct?

  A. All applications are predefined by Junos.
  B. All applications are custom defined by the administrator.
  C. All applications are either custom or Junos defined.
  D. All applications in service objects are not available on the vSRX Series device.
  C. All applications are either custom or Junos defined.

• Question 84:

  Which IPsec protocol is used to encrypt the data payload?

  A. ESP
  B. IKE
  C. AH
  D. TCP
  A. ESP

• Question 85:

  What must be enabled on an SRX Series device for the reporting engine to create reports?

  A. System logging
  B. SNMP
  C. Packet capture
  D. Security logging
  D. Security logging

• Question 86:

  Which two statements are correct about functional zones? (Choose two.)

  A. Functional zones must have a user-defined name.
  B. Functional zone cannot be referenced in security policies or pass transit traffic.
  C. Multiple types of functional zones can be defined by the user.
  D. Functional zones are used for out-of-band device management.
  B. Functional zone cannot be referenced in security policies or pass transit traffic.
  D. Functional zones are used for out-of-band device management.

• Question 87:

  Which feature would you use to protect clients connected to an SRX Series device from a SYN flood attack?

  A. security policy
  B. host inbound traffic
  C. application layer gateway
  D. screen option
  D. screen option

• Question 88:

  You want to provide remote access to an internal development environment for 10 remote developers.

  Which two components are required to implement Juniper Secure Connect to satisfy this requirement? (Choose two.)

  A. an additional license for an SRX Series device
  B. Juniper Secure Connect client software
  C. an SRX Series device with an SPC3 services card
  D. Marvis virtual network assistant
  A. an additional license for an SRX Series device
  B. Juniper Secure Connect client software

• Question 89:

  Click the Exhibit button.

  

  What is the purpose of the host-inbound-traffic configuration shown in the exhibit?

  A. to permit host inbound HTTP traffic and deny all other traffic on the internal security zone
  B. to deny and log all host inbound traffic on the internal security zone, except for HTTP traffic
  C. to permit all host inbound traffic on the internal security zone, but deny HTTP traffic
  D. to permit host inbound HTTP traffic on the internal security zone
  C. to permit all host inbound traffic on the internal security zone, but deny HTTP traffic

• Question 90:

  You have multiple branch locations using an SRX Series device. You want a cloud-based solution to configure and monitor this device. this scenario, which solution would you use?

  A. J-Web
  B. Juniper Sky Enterprise
  C. Junos Space Security Director
  D. Juniper Secure Analytics
  B. Juniper Sky Enterprise