Security - Associate (JNCIA-SEC) JN0-231 Dumps

Free Juniper JN0-231 Practice Exam Q&As Security - Associate (JNCIA-SEC)

https://www.passcert.com/JN0-231.html

Free Juniper JN0-231 Practice Exam From Passcert for Your Best Preparation

1. If you need to protect against malicious files that might be download through Web-based e-mail, which Sky ATP protection mechanism should you use?

A.SMTP file inspection B.IMAP file inspection C.POP3 file inspection D.HTTP file inspection Answer: D

Free Juniper JN0-231 Practice Exam From Passcert for Your Best Preparation

2. Which of the following are supported Mini-Physical Interface Modules (MiniPIMs) on an SRX Series Services Gateways? (Choose three.)

A.DOCSIS B.8-Port Gigabit Ethernet SFP XPIM C.1-Port Gigabit Ethernet PoE D.Serial E.1-Port Gigabit Ethernet Small Form-Factor Pluggable (SFP) Answer: ADE

Free Juniper JN0-231 Practice Exam From Passcert for Your Best Preparation

3. The vSRX is available for which two of the following hypervisors?

(Choose two.)

A.Hyper-V B.Xen C.OpenVZ D.KVM Answer: AD

Free Juniper JN0-231 Practice Exam From Passcert for Your Best Preparation

4. You are configuring an SRX Series device to inter-operate with a third-party IPsec VPN endpoint that uses policies to create the VPN. In this scenario, what must be configured for the VPN to work?

A.perfect forward secrecy B.VPN monitoring C.re-keying D.proxy IDs Answer: D

Free Juniper JN0-231 Practice Exam From Passcert for Your Best Preparation

5. What match criteria does an SRX Series device’s network processing unit (NPU) use to determine if a flow already exists for a packet? (Choose three.)

A.MAC address B.inbound interface C.source port D.unique session token number for a given zone and virtual router E.protocol Answer: CDE

Free Juniper JN0-231 Practice Exam From Passcert for Your Best Preparation

6. After a packet is not able to be matched to an existing session, what is the next service to inspect the packet?

A.screens B.zones C.policy D.static NAT Answer: A

Free Juniper JN0-231 Practice Exam From Passcert for Your Best Preparation

7.When traffic has met match criteria, what options are available to be performed on the traffic? (Choose three.)

A.permit B.reject C.deny D.discard E.redirect Answer: ABC

Free Juniper JN0-231 Practice Exam From Passcert for Your Best Preparation

8. In the context of SRX Series devices, what services does fastpath processing skip? (Choose two.)

A.zones B.screens C.services ALG D.policy Answer: AD

Free Juniper JN0-231 Practice Exam From Passcert for Your Best Preparation

9. When does a Junos security device implement NAT? A.first path processing only B.fast path processing only C.both first path and fast path processing D.neither first path nor fast path processing Answer: C

Free Juniper JN0-231 Practice Exam From Passcert for Your Best Preparation

10.Which order do Junos security devices examine policies for transit traffic?

A.default policy, zone policies, global policies B.zone policies, global policies, default policy C.global policies, zone policies, default policy D.default policy, global policies, zone policies Answer: B