Juniper JN0-230 JNCIA-SEC Exam Practice Test Instant Access

Question 1

What is a characteristic of the Junos enhanced Web filtering solution ?

AThe SRX series device intercepts HTTP and HTTPS request and send the source IP address to the on-premises Websense server

BThe Websense cloud resolves the categorized URLs to IP addresses by performing a DNS reverse loockup

CThe Websense cloud categorize the URLs and also provide site reputation information.

DJunos Enhanced Web filtering allows the SRX series device to categorize URLs using an on-premises websense server.

Answer : D

Question 2

On an SRX Series device, how should you configure your IKE gateway if the remote endpoint is a branch office-using a dynamic IP address?

AConfigure the IPsec policy to use MDS authentication.

BConfigure the IKE policy to use aggressive mode.

CConfigure the IPsec policy to use aggressive mode.

DConfigure the IKE policy to use a static IP address

Answer : B

Question 3

Which source NAT rule set would be used when a packet matches the conditions in multiple rule sets?.

AThe most specific rule set will be used

BThe least specific rule set will be used

CThe first rule set matched will be used

DThe last rule set matched will be used

Answer : C

Question 4

When configuring IPsec VPNs, setting a hash algorithm solves which security concern?

AEncryption

BIntegrity

CAvailability

DRedundancy

Answer : B

Question 5

Which two statements are correct about global security policies? (choose two)

AGlobal based policies can reference the destination zone

BGlobal based policies can reference the source zone

CGlobal based policies must reference a dynamic application

DGlobal based policies must reference the source and destination zones

Answer : A, B

Question 6

Which two statements are correct about security zones? (choose two)

ASecurity zones use packet filters to prevent communication between management ports

BSecurity zones use security policies that enforce rules for the transit traffic

CSecurity zones use a stateful firewall to provide secure network connections

DSecurity zones use address books to link username to IP addresses.

Answer : B, C

Question 7

You want to automatically generate the encryption and authentication keys during IPsec VPN establishment.

What would be used to accomplish this task?

AIPsec

BDiffie_Hellman

CMain mode

DAggregate mode

Answer : B

Juniper Security, Associate Exa JN0-230 JNCIA-SEC Exam Practice Test