Juniper JN0-230 JNCIA-SEC Exam Practice Test Instant Access

Question 1

Click the exhibit button

You are configuring an IPsec VPN for the network show in the exhibit

Which feature must be enabled the VPN to established successfully?

AMain mode must be configured on the IKE gateway

BMain mode must be configured on the IPsec VPN

CAggressive mode must be configured on the IPsec VPN

DAggressive mode must be configured on IKE gateway

Answer : D

Question 2

BY default, revenue interface are placed into which system-defined security zone on an SRX series device?

ATrust

BNull

CJunos-trust

Duntrust

Answer : D

Question 3

Which Statement is correct about Sky ATP?

AThe local Sky ATP platform downloads the latest threat from managed site

BSky ATP can provide live threat feeds to SRX series devices

CSky ATP is a local hardware-based security threat analyzer that performs multiple tasks.

DSky ATP relies on the SRX series device to open and analyze suspect file attachments

Answer : B

Question 4

What does IPsec use to negotiate encryption algorithms?

ATLS

BAH

CESP

DIKE

Answer : C

Question 5

Which source NAT rule set would be used when a packet matches the conditions in multiple rule sets?.

AThe most specific rule set will be used

BThe least specific rule set will be used

CThe first rule set matched will be used

DThe last rule set matched will be used

Answer : C

Question 6

What is a type of security feed that Sky ATP provides to a vSRX series device by default?

AC&C feeds

BMalware feeds

CRSS feeds

DACL feeds

Answer : A

Question 7

You want to automatically generate the encryption and authentication keys during IPsec VPN establishment.

What would be used to accomplish this task?

AIPsec

BDiffie_Hellman

CMain mode

DAggregate mode

Answer : B

Juniper JN0-230 Security, Associate Exam JNCIA-SEC Exam Practice Test