Juniper
JN0-231 Exam
Associate JNCIA-SEC
Questions & Answers
(Demo Version - Limited Content)
Thank you for Downloading JN0-231 exam PDF Demo
Get Full File:
https://www.certsland.com/jn0-231-dumps/
www.certsland.com
Questions & Answers PDF Page 2
Version:6.1
Question: 1
Which two criteria should a zone-based security policy include? (Choose two.)
A. a source port
B. a destination port
C. zone context
D. an action
Answer: AB
Explanation:
A security policy is a set of statements that controls traffic from a specified source to a specified
destination using a specified service. A policy permits, denies, or tunnels specified types of traffic
unidirectionally between two points.
Each policy consists of:
A unique name for the policy.
A from-zone and a to-zone, for example: user@host# set security policies from-zone untrust to-zone
untrust
A set of match criteria defining the conditions that must be satisfied to apply the policy rule. The
match criteria are based on a source IP address, destination IP address, and applications. The user
www.certsland.com
Questions & Answers PDF Page 3
identity firewall provides greater granularity by including an additional tuple, source-identity, as part
of the policy statement.
A set of actions to be performed in case of a match—permit, deny, or reject.
Accounting and auditing elements—counting, logging, or structured system logging.
https://www.juniper.net/documentation/us/en/software/junos/security-policies/topics/topic-
map/security-policy-configuration.html
Question: 2
You are assigned a project to configure SRX Series devices to allow connections to your webservers.
The webservers have a private IP address, and the packets must use NAT to be accessible from the
Internet. You do not want the webservers to initiate connections with external update servers on the
Internet using the same IP address as customers use to access them.
Which two NAT types must be used to complete this project? (Choose two.)
A. static NAT
B. hairpin NAT
C. destination NAT
D. source NAT
Answer: C, D
Explanation:
Question: 3
You are asked to verify that a license for AppSecure is installed on an SRX Series device.
www.certsland.com
Questions & Answers PDF Page 4
In this scenario, which command will provide you with the required information?
A. user@srx> show system license
B. user@srx> show services accounting
C. user@srx> show configuration system
D. user@srx> show chassis firmware
Answer: A
Explanation:
Question: 4
Click the Exhibit button.
Referring to the exhibit, a user is placed in which hierarchy when the exit command is run?
A)
[edit security policies from-zone trust to-zone dmz]
user@vSRX-1#
B)
[edit]
user@vSRX-1#
C)
[edit security policies]
user@vSRX-1#
www.certsland.com
Questions & Answers PDF Page 5
D)
user@vSRX-1>
A. Option A
B. Option B
C. Option C
D. Option D
Answer: A
Explanation:
Question: 5
You want to enable the minimum Juniper ATP services on a branch SRX Series device.
In this scenario, what are two requirements to accomplish this task? (Choose two.)
A. Install a basic Juniper ATP license on the branch device.
B. Configure the juniper-atp user account on the branch device.
C. Register for a Juniper ATP account on https://sky.junipersecurity.net.
D. Execute the Juniper ATP script on the branch device.
Answer: CD
Explanation:
https://manuals.plus/m/95fded847e67e8f456453182a54526ba3224a61a337c47177244d345d1f3b1
9e.pdf
www.certsland.com
Thank You for trying JN0-231 PDF Demo
https://www.certsland.com/jn0-231-dumps/
Start Your JN0-231 Preparation
[Limited Time Offer] Use Coupon " SAVE20 " for extra 20%
discount on the purchase of PDF file. Test your
JN0-231 preparation with actual exam questions
www.certsland.com
