Juniper JN0-230 JNCIA-SEC Exam Practice Test Instant Access

Question 1

On an SRX Series device, how should you configure your IKE gateway if the remote endpoint is a branch office-using a dynamic IP address?

AConfigure the IPsec policy to use MDS authentication.

BConfigure the IKE policy to use aggressive mode.

CConfigure the IPsec policy to use aggressive mode.

DConfigure the IKE policy to use a static IP address

Answer : B

Question 2

Users on the network are restricted from accessing Facebook, however, a recent examination of the logs show that users are accessing Facebook.

Referring to the exhibit,

Why is this problem happening?

AGlobal rules are honored before zone-based rules.

BThe internet-Access rule has a higher precedence value

CThe internet-Access rule is listed first

DZone-based rules are honored before global rules

Answer : D

Question 3

You have created a zones-based security policy that permits traffic to a specific webserver for the marketing team. Other groups in the company are not permitted to access the webserver. When marketing users attempt to access the server they are unable to do so.

What are two reasons for this access failure? (Choose two.)

AYou failed to change the source zone to include any source zone.

BYou failed to position the policy after the policy that denies access to the webserver.

CYou failed to commit the policy change.

DYou failed to position the policy before the policy that denies access the webserver

Answer : C, D

Question 4

Which flow module components handles processing for UTM?

APolicy

BZones

CServices

DScreen options

Answer : C

Question 5

Exhibit.

Which statement is correct regarding the interface configuration shown in the exhibit?

AThe interface MTU has been increased.

BThe IP address has an invalid subnet mask.

CThe IP address is assigned to unit 0.

DThe interface is assigned to the trust zone by default.

Answer : C

Question 6

Which two segments describes IPsec VPNs? (Choose two.)

AIPsec VPN traffic is always authenticated.

BIPsec VPN traffic is always encrypted.

CIPsec VPNs use security to secure traffic over a public network between two remote sites.

DIPsec VPNs are dedicated physical connections between two private networks.

Answer : A, C

Question 7

On an SRX device, you want to regulate traffic base on network segments.

In this scenario, what do you configure to accomplish this task?

AScreens

BZones

CALGs

DNAT

Answer : B

Juniper JN0-230 Security, Associate Exam JNCIA-SEC Exam Practice Test