[Apr-2024] JN0-231 Dumps are Available for Instant Access using Test4Cram [Q53-Q77]

Rate this post

[Apr-2024] JN0-231 Dumps are Available for Instant Access using Test4Cram

JN0-231 Dumps 2024 – New Juniper JN0-231 Exam Questions

Q53. A new SRX Series device has been delivered to your location. The device has the factory-default configuration loaded. You have powered on the device and connected to the console port.
What would you use to log into the device to begin the initial configuration?

Root with a password of juniper”

Root with no password

Admin with password

Admin with a password ”juniper”

Q54. Referring to the exhibit.

Which type of NAT is being performed?

Source NAT with PAT

Source NAT without PAT

Destination NAT without PAT

Destination NAT with PAT

Q55. You want to deploy a NAT solution.
In this scenario, which solution would provide a static translation without PAT?

interface-based source NAT

pool-based NAT with address shifting

pool-based NAT with PAT

pool-based NAT without PAT

Q56. Which two statements are correct about the null zone on an SRX Series device? (Choose two.)

The null zone is created by default.

The null zone is a functional security zone.

Traffic sent or received by an interface in the null zone is discarded.

You must enable the null zone before you can place interfaces into it.

Q57. Which statements is correct about global security policies?

Global policies allow you to regulate traffic with addresses and applications, regardless of their security zones.

Traffic matching global is not added to the session table.

Global policies eliminate the need to assign interface to security zones.

Global security require you to identify a source and destination zone.

Q58. Which actions would be applied for the pre-ID default policy unified policies?

Redirect the session

Reject the session

Log the session

Silently drop the session

Q59. Which statement is correct about IKE?

IKE phase 1 is used to establish the data path

IKE phase 1 only support aggressive mode.

IKE phase 1 negotiates a secure channel between gateways.

IKE phase 1 establishes the tunnel between devices

Q60. Which zone is considered a functional zone?

Trust

Junos host

Null

Management

Q61. Which statements about NAT are correct? (Choose two.)

When multiple NAT rules have overlapping match conditions, the rule listed first is chosen.

Source NAT translates the source port and destination IP address.

Source NAT translates the source IP address of packet.

When multiple NAT rules have overlapping match conditions, the most specific rule is chosen.

Q62. Exhibit.

Which two statements are true? (Choose two.)

Logs for this security policy are generated.

Logs for this security policy are not generated.

Traffic static for this security policy are not generated.

Traffic statistics for this security policy are generated.

Q63. Click the Exhibit button.

What is the purpose of the host-inbound-traffic configuration shown in the exhibit?

to permit host inbound HTTP traffic and deny all other traffic on the internal security zone

to deny and log all host inbound traffic on the internal security zone, except for HTTP traffic

to permit all host inbound traffic on the internal security zone, but deny HTTP traffic

to permit host inbound HTTP traffic on the internal security zone

Q64. Which three Web filtering deployment actions are supported by Junos? (Choose three.)

Use IPS.

Use local lists.

Use remote lists.

Use Websense Redirect.

Use Juniper Enhanced Web Filtering.

Q65. Screens on an SRX Series device protect against which two types of threats? (Choose two.)

IP spoofing

ICMP flooding

zero-day outbreaks

malicious e-mail attachments

Q66. When configuring IPsec VPNs, setting a hash algorithm solves which security concern?

Encryption

Integrity

Availability

Redundancy

Q67. Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)

With global-based policies, you do not need to specify a destination zone in the match criteria.

With global-based policies, you do not need to specify a source zone in the match criteria.

With global-based policies, you do not need to specify a destination address in the match criteria.

With global-based policies, you do not need to specify a source address in the match criteria.

Q68. When are Unified Threat Management services performed in a packet flow?

before security policies are evaluated

as the packet enters an SRX Series device

only during the first path process

after network address translation

Q69. Click the Exhibit button.

Which two statements are correct about the partial policies shown in the exhibit? (Choose two.)

UDP traffic matched by the deny-all policy will be silently dropped.

TCP traffic matched by the reject-all policy will have a TCP RST sent.

TCP traffic matched from the zone trust is allowed by the permit-all policy.

UDP traffic matched by the reject-all policy will be silently dropped.

Q70. Your company has been assigned one public IP address. You want to enable internet traffic to reach multiple servers in your DMZ that are configured with private address.
In this scenario, which type of NAT would be used to accomplish this tasks?

Static NAT

Destination NAT

Source NAT

NAT without PAT

Q71. Click the Exhibit button.

Which two statements are correct about the partial policies shown in the exhibit? (Choose two.)

UDP traffic matched by the deny-all policy will be silently dropped.

TCP traffic matched by the reject-all policy will have a TCP RST sent.

TCP traffic matched from the zone trust is allowed by the permit-all policy.

UDP traffic matched by the reject-all policy will be silently dropped.

Q72. What is a characteristic of the Junos enhanced Web filtering solution?

The SRX series device intercepts HTTP and HTTPS request and send the source IP address to the on-premises Websense server

The Websense cloud resolves the categorized URLs to IP addresses by performing a DNS reverse loockup

The Websense cloud categorize the URLs and also provide site reputation information.

Junos Enhanced Web filtering allows the SRX series device to categorize URLs using an onpremises websense server.

Q73. The Sky ATP premium or basic-Threat Feed license is needed fort which two features? (Choose two.)

Outbound protection

C&C feeds

Executable inspection

Custom feeds

Q74. Your ISP gives you an IP address of 203.0.113.0/27 and informs you that your default gateway is 203.0.113.1.
You configure destination NAT to your internal server, but the requests sent to the webserver at 203.0.113.5 are not arriving at the server.
In this scenario, which two configuration features need to be added? (Choose two.)

firewall filter

security policy

proxy-ARP

UTM policy

Q75. Click the Exhibit button

You have configured source … Being received By the SRX series Which features must be configured

Port Forwarding

Destination NAT

Proxy ARP

Reverse static NAT

Q76. You are installing a new SRX Series device and you are only provided one IP address from your ISP.
In this scenario, which NAT solution would you implement?

pool-based NAT with PAT

pool-based NAT with address shifting

interface-based source NAT

pool-based NAT without PAT

Q77. Which statement is correct about packet mode processing?

Packet mode enables session-based processing of incoming packets.

Packet mode works with NAT, VPNs, UTM, IDP, and other advanced security services.

Packet mode bypasses the flow module.

Packet mode is the basis for stateful processing.