Practice Free Juniper JN0-231 Exam Questions Online, JN0-231 Free Demo

Question No : 1
What are three Junos UTM features? (Choose three.)

A.screens
B.antivirus
C.Web filtering
D.IDP/IPS
E.content filtering

Answer:

Question No : 2
Which two components are part of a security zone? (Choose two.)

A.inet.0
B.fxp0
C.address book
D.ge-0/0/0.0

Answer:

Question No : 3
Which two statements are correct about screens? (Choose two.)

A.Screens process inbound packets.
B.Screens are processed on the routing engine.
C.Screens process outbound packets.
D.Screens are processed on the flow module.

Answer:

Question No : 4
You are creating Ipsec connections.
In this scenario, which two statements are correct about proxy IDs? (Choose two.)

A.Proxy IDs are used to configure traffic selectors.
B.Proxy IDs are optional for Phase 2 session establishment.
C.Proxy IDs must match for Phase 2 session establishment.
D.Proxy IDs default to 0.0.0.0/0 for policy-based VPNs.

Answer:

Question No : 5
What is the correct order in which interface names should be identified?

A.system slot number C> interface media type C> port number C> line card slot number
B.system slot number C> port number C> interface media type C> line card slot number
C.interface media type C> system slot number C> line card slot number C> port number
D.interface media type C> port number C> system slot number C> line card slot number

Answer:

Question No : 6
When configuring antispam, where do you apply any local lists that are configured?

A.custom objects
B.advanced security policy
C.antispam feature-profile
D.antispam UTM policy

Answer:

Question No : 7
Click the Exhibit button.

Referring to the exhibit, a user is placed in which hierarchy when the exit command is run?

A.[edit security policies from-zone trust to-zone dmz] user@vSRX-1#
B.[edit] user@vSRX-1#
C.[edit security policies] user@vSRX-1#
D.user@vSRX-1>

Answer:

Question No : 8
Which two statements are correct about IKE security associations? (Choose two.)

A.IKE security associations are established during IKE Phase 1 negotiations.
B.IKE security associations are unidirectional.
C.IKE security associations are established during IKE Phase 2 negotiations.
D.IKE security associations are bidirectional.

Answer:

Question No : 9
A security zone is configured with the source IP address 192.168.0.12/255.255.0.255 wildcard match.
In this scenario, which two IP packets will match the criteria? (Choose two.)

A.192.168.1.21
B.192.168.0.1
C.192.168.1.12
D.192.168.22.12

Answer:

Question No : 10
Click the Exhibit button.

What is the purpose of the host-inbound-traffic configuration shown in the exhibit?

A.to permit host inbound HTTP traffic and deny all other traffic on the internal security zone
B.to deny and log all host inbound traffic on the internal security zone, except for HTTP traffic
C.to permit all host inbound traffic on the internal security zone, but deny HTTP traffic
D.to permit host inbound HTTP traffic on the internal security zone

Answer:

Test Online Free Juniper JN0-231 Exam Questions and Answers