Juniper JN0-230 JNCIA-SEC Exam Practice Test Instant Access

Question 1

Which two statements are correct about global security policies? (choose two)

AGlobal based policies can reference the destination zone

BGlobal based policies can reference the source zone

CGlobal based policies must reference a dynamic application

DGlobal based policies must reference the source and destination zones

Answer : A, B

Question 2

What is a characteristic of the Junos enhanced Web filtering solution ?

AThe SRX series device intercepts HTTP and HTTPS request and send the source IP address to the on-premises Websense server

BThe Websense cloud resolves the categorized URLs to IP addresses by performing a DNS reverse loockup

CThe Websense cloud categorize the URLs and also provide site reputation information.

DJunos Enhanced Web filtering allows the SRX series device to categorize URLs using an on-premises websense server.

Answer : D

Question 3

When configuring IPsec VPNs, setting a hash algorithm solves which security concern?

AEncryption

BIntegrity

CAvailability

DRedundancy

Answer : B

Question 4

Click the Exhibit button

You have configured source ... Being received By the SRX series Which features must be configured

APort Forwarding

BDestination NAT

CProxy ARP

DReverse static NAT

Answer : C

Question 5

Which two statements are correct about security zones? (choose two)

ASecurity zones use packet filters to prevent communication between management ports

BSecurity zones use security policies that enforce rules for the transit traffic

CSecurity zones use a stateful firewall to provide secure network connections

DSecurity zones use address books to link username to IP addresses.

Answer : B, C

Question 6

On an SRX Series device, how should you configure your IKE gateway if the remote endpoint is a branch office-using a dynamic IP address?

AConfigure the IPsec policy to use MDS authentication.

BConfigure the IKE policy to use aggressive mode.

CConfigure the IPsec policy to use aggressive mode.

DConfigure the IKE policy to use a static IP address

Answer : B

Question 7

You have created a zones-based security policy that permits traffic to a specific webserver for the marketing team. Other groups in the company are not permitted to access the webserver. When marketing users attempt to access the server they are unable to do so.

What are two reasons for this access failure? (Choose two.)

AYou failed to change the source zone to include any source zone.

BYou failed to position the policy after the policy that denies access to the webserver.

CYou failed to commit the policy change.

DYou failed to position the policy before the policy that denies access the webserver

Answer : C, D

Juniper JN0-230 Security, Associate Exam JNCIA-SEC Exam Practice Test