Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Security-Associate (JNCIA-SEC) Practice Questions

Question # 21

You want to block executable files ("exe) from being downloaded onto your network.

Which UTM feature would you use in this scenario?

Options:

A.  

IPS

B.  

Web filtering

C.  

content filtering

D.  

antivirus

Discussion 0
Question # 22

Which Juniper ATP feed provides a dynamic list of known botnet servers and known sources of malware downloads?

Options:

A.  

infected host cloud feed

B.  

Geo IP feed

C.  

C&C cloud feed

D.  

blocklist feed

Discussion 0
Question # 23

Which statement is correct about static NAT?

Options:

A.  

Static NAT supports port translation.

B.  

Static NAT rules are evaluated after source NAT rules.

C.  

Static NAT implements unidirectional one-to-one mappings.

D.  

Static NAT implements unidirectional one-to-many mappings.

Discussion 0
Question # 24

Which two components are part of a security zone? (Choose two.)

Options:

A.  

inet.0

B.  

fxp0

C.  

address book

D.  

ge-0/0/0.0

Discussion 0
Question # 25

When configuring antispam, where do you apply any local lists that are configured?

Options:

A.  

custom objects

B.  

advanced security policy

C.  

antispam feature-profile

D.  

antispam UTM policy

Discussion 0
Question # 26

Click the Exhibit button.

Question # 26

Which two statements are correct about the partial policies shown in the exhibit? (Choose two.)

Options:

A.  

UDP traffic matched by the deny-all policy will be silently dropped.

B.  

TCP traffic matched by the reject-all policy will have a TCP RST sent.

C.  

TCP traffic matched from the zone trust is allowed by the permit-all policy.

D.  

UDP traffic matched by the reject-all policy will be silently dropped.

Discussion 0
Question # 27

When creating a site-to-site VPN using the J-Web shown in the exhibit, which statement is correct?

Options:

A.  

The remote gateway is configured automatically based on the local gateway settings.

B.  

RIP, OSPF, and BGP are supported under Routing mode.

C.  

The authentication method is pre-shared key or certificate based.

D.  

Privately routable IP addresses are required.

Discussion 0
Question # 28

Click the Exhibit button.

Question # 28

Referring to the exhibit, which two statements are correct about the ping command? (Choose two.)

Options:

A.  

The DMZ routing-instance is the source.

B.  

The 10.10.102.10 IP address is the source.

C.  

The 10.10.102.10 IP address is the destination.

D.  

The DMZ routing-instance is the destination.

Discussion 0
Question # 29

Which two security features inspect traffic at Layer 7? (Choose two.)

Options:

A.  

IPS/IDP

B.  

security zones

C.  

application firewall

D.  

integrated user firewall

Discussion 0
Question # 30

You are assigned a project to configure SRX Series devices to allow connections to your webservers. The webservers have a private IP address, and the packets must use NAT to be accessible from the Internet. The webservers must use the same address for both connections from the Internet and communication with update servers.

Which NAT type must be used to complete this project?

Options:

A.  

source NAT

B.  

destination NAT

C.  

static NAT

D.  

hairpin NAT

Discussion 0

JN0-231 PDF

JN0-231 PDF (Printable)
$46.5
$154.99

JN0-231 Testing Engine

JN0-231 PDF (Printable)
$51
$169.99

JN0-231 PDF + Testing Engine

JN0-231 PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions