Get Real JN0-231 Quesions Pass Juniper Certification Exams Easily
JN0-231 Dumps are Available for Instant Access
NEW QUESTION # 20
You want to generate reports from the l-Web on an SRX Series device.
Which logging mode would you use in this scenario?
- A. Syslog
- B. Event
- C. local
- D. Stream
Answer: D
NEW QUESTION # 21
You are investigating a communication problem between two hosts and have opened a session on the SRX Series device closest to one of the hosts and entered the show security flow session command.
What information will this command provide? (Choose two.)
- A. The end-to-end data path that the packets are taking.
- B. The IP address of the host that initiates the session.
- C. The total active time of the session.
- D. The security policy name that is controlling the session.
Answer: B,D
NEW QUESTION # 22
Which two addresses are valid address book entries? (Choose two.)
- A. 153.146.0.145/255.255.0.255
- B. 173.145.5.21/255.255.255.0
- C. 191.168.203.0/24
- D. 203.150.108.10/24
Answer: B,D
Explanation:
The correct address book entries are:
173.145.5.21/255.255.255.0
203.150.108.10/24
Both of these entries represent a valid IP address and subnet mask combination, which can be used as an address book entry in a Juniper device.
NEW QUESTION # 23
Referring to the exhibit.
Which type of NAT is being performed?
- A. Source NAT without PAT
- B. Source NAT with PAT
- C. Destination NAT without PAT
- D. Destination NAT with PAT
Answer: B
NEW QUESTION # 24
Which type of security policy protect restricted services from running on non-standard ports?
- A. Sky ATP
- B. IDP
- C. antivirus
- D. Application firewall
Answer: B
NEW QUESTION # 25
Which two statements are correct about IPsec security associations? (Choose two.)
- A. IPsec security associations are bidirectional.
- B. IPsec security associations are established during IKE Phase 1 negotiations.
- C. IPsec security associations are established during IKE Phase 2 negotiations.
- D. IPsec security associations are unidirectional.
Answer: A,C
Explanation:
The two statements that are correct about IPsec security associations are that they are bidirectional and that they are established during IKE Phase 2 negotiations. IPsec security associations are bidirectional, meaning that they provide security for both incoming and outgoing traffic. IPsec security associations are established during IKE Phase 2 negotiations, which negotiates the security parameters and establishes the security association between the two peers. For more information, please refer to the Juniper Networks IPsec VPN Configuration Guide, which can be found on Juniper's website.
NEW QUESTION # 26
Which source NAT rule set would be used when a packet matches the conditions in multiple rule sets?
- A. The last rule set matched will be used
- B. The most specific rule set will be used
- C. The least specific rule set will be used
- D. The first rule set matched will be used
Answer: D
NEW QUESTION # 27
What are two functions of Juniper ATP Cloud? (Choose two.)
- A. DDoS protection
- B. Web content filtering
- C. malware inspection
- D. Geo IP feeds
Answer: C,D
Explanation:
Juniper Advanced Threat Prevention (ATP) Cloud is a security service that helps organizations protect against advanced threats by providing real-time threat intelligence and automated response capabilities. It combines a cloud-based threat intelligence platform with the security capabilities of Juniper Networks security devices to provide comprehensive protection against advanced threats. The two functions of Juniper ATP Cloud include malware inspection and Geo IP feeds. The malware inspection component provides real-time protection against known and unknown threats by analyzing suspicious files and determining if they are malicious. The Geo IP feeds provide a global view of IP addresses and their associated countries, allowing organizations to identify and block traffic from known malicious countries.
NEW QUESTION # 28
Click the Exhibit button.
Referring to the exhibit, a user is placed in which hierarchy when the exit command is run?
- A. [edit]
user@vSRX-1# - B. user@vSRX-1>
- C. [edit security policies]
user@vSRX-1# - D. [edit security policies from-zone trust to-zone dmz]
user@vSRX-1#
Answer: A
NEW QUESTION # 29
Click the Exhibit button.
Referring to the exhibit, which two statements are correct about the ping command? (Choose two.)
- A. The DMZ routing-instance is the destination.
- B. The DMZ routing-instance is the source.
- C. The 10.10.102.10 IP address is the destination.
- D. The 10.10.102.10 IP address is the source.
Answer: B,C
NEW QUESTION # 30
Which statement is correct about Web filtering?
- A. The Juniper Enhanced Web Filtering solution requires a locally managed server.
- B. The decision to permit or deny is based on the category to which a URL belongs.
- C. The decision to permit or deny is based on the body content of an HTTP packet.
- D. The client can receive an e-mail notification when traffic is blocked.
Answer: B
Explanation:
Web filtering is a feature that allows administrators to control access to websites by categorizing URLs into different categories such as gambling, social networking, or adult content. The decision to permit or deny access to a website is based on the category to which a URL belongs. This is done by comparing the URL against a database of categorized websites and making a decision based on the policy defined by the administrator.
Reference:
Juniper Networks SRX Series Services Gateway Web Filtering Configuration Guide: https://www.juniper.net/documentation/en_US/release-independent/junos/topics/topic-map/security-services-web-filtering.html
NEW QUESTION # 31
Which statement is correct about static NAT?
- A. Static NAT implements unidirectional one-to-many mappings.
- B. Static NAT supports port translation.
- C. Static NAT rules are evaluated after source NAT rules.
- D. Static NAT implements unidirectional one-to-one mappings.
Answer: D
Explanation:
Static NAT (Network Address Translation) is a type of NAT that maps a public IP address to a private IP address. With static NAT, a one-to-one mapping is created between a public IP address and a private IP address. This means that a single public IP address is mapped to a single private IP address, and all incoming traffic to the public IP address is forwarded to the private IP address.
NEW QUESTION # 32
Which two IKE Phase 1 configuration options must match on both peers to successfully establish a tunnel? (Choose two.)
- A. IKE mode
- B. Diffie-Hellman group
- C. VPN name
- D. gateway interfaces
Answer: A,B
NEW QUESTION # 33
You want to automatically generate the encryption and authentication keys during IPsec VPN establishment.
What would be used to accomplish this task?
- A. IPsec
- B. Main mode
- C. Diffie_Hellman
- D. Aggregate mode
Answer: C
NEW QUESTION # 34
You want to integrate an SRX Series device with SKY ATP.
What is the first action to accomplish task?
- A. Copy the operational script from the Sky ATP Web UI.
- B. Create an account with the Sky ATP Web UI.
- C. Issue the commit script to register the SRX Series device.
- D. Create the SSL VPN tunnel between the SRX Series device and Sky ATP.
Answer: B
NEW QUESTION # 35
What is the behavior of an SRX series device when UDP and TCP is rejected by a security policy actions? (choose two)
- A. The reject action drops TCP packets and send an RST message to the source.
- B. The reject actions drops TCP packets and sends an ICMP message to the source
- C. The reject action drops UDP packets and does not send ant message to the source
- D. The reject action drops UDP packets and sends an ICMP message to the source
Answer: A,D
NEW QUESTION # 36
Exhibit.
Which two statements are true? (Choose two.)
- A. Traffic static for this security policy are not generated.
- B. Traffic statistics for this security policy are generated.
- C. Logs for this security policy are generated.
- D. Logs for this security policy are not generated.
Answer: B,C
NEW QUESTION # 37
......
Get Instant Access REAL JN0-231 DUMP Pass Your Exam Easily: https://examtorrent.actual4test.com/JN0-231_examcollection.html