Juniper JN0-231 Security, Associate Exam Exam Practice Test Questions

• Question 1

  Which two non-configurable zones exist by default on an SRX Series device? (Choose two.)

  • Junos-host
  • functional
  • null
  • management

  Show Answer Answer: A,C Next

• Question 2

  You are installing a new SRX Series device and you are only provided one IP address from your ISP. In this scenario, which NAT solution would you implement?

  • pool-based NAT with PAT
  • pool-based NAT with address shifting
  • interface-based source NAT
  • pool-based NAT without PAT

  Show Answer Answer: C Next

• Question 3

  Which two statements are true about Juniper ATP Cloud? (Choose two.)

  • Juniper ATP Cloud is an on-premises ATP appliance.
  • Juniper ATP Cloud can be used to block and allow IPs.
  • Juniper ATP Cloud is a cloud-based ATP subscription.
  • Juniper ATP Cloud delivers intrusion protection services.

  Show Answer Answer: C,D Next

• Question 4

  When are Unified Threat Management services performed in a packet flow?

  • before security policies are evaluated
  • as the packet enters an SRX Series device
  • only during the first path process
  • after network address translation

  Show Answer Answer: D Next

• Question 5

  An application firewall processes the first packet in a session for which the application has not yet been identified. In this scenario, which action does the application firewall take on the packet?

  • It allows the first packet.
  • It denies the first packet and sends an error message to the user.
  • It denies the first packet.
  • It holds the first packet until the application is identified.

  Show Answer Answer: D Next