JN0-231 Dumps V10.02: Your Comprehensive Study Companion for Juniper JNCIA-SEC Exam

1. Which security policy type will be evaluated first?

2. Which Web filtering solution uses a direct Internet-based service for URL categorization?

3. What is the default value of the dead peer detection (DPD) interval for an IPsec VPN tunnel?

4. Which three operating systems are supported for installing and running Juniper Secure Connect client software? (Choose three.)

5. Which two statements are correct about the integrated user firewall feature? (Choose two.)

6. When creating a site-to-site VPN using the J-Web shown in the exhibit, which statement is correct?

7. You are installing a new SRX Series device and you are only provided one IP address from your ISP.

In this scenario, which NAT solution would you implement?

8. Which statement is correct about Web filtering?

9. Which two non-configurable zones exist by default on an SRX Series device? (Choose two.)

10. Which two statements about the Junos OS CLI are correct? (Choose two.)

11. What is the default timeout value for TCP sessions on an SRX Series device?

12. What is the number of concurrent Secure Connect user licenses that an SRX Series device has by default?

13. Which two statements are correct about IPsec security associations? (Choose two.)

14. Which statement is correct about Junos security policies?

15. Which two statements are correct about global policies? (Choose two.)

16. What are two Juniper ATP Cloud feed analysis components? (Choose two.)

17. Which two statements are true about Juniper ATP Cloud? (Choose two.)

18. An application firewall processes the first packet in a session for which the application has not yet been identified.

In this scenario, which action does the application firewall take on the packet?

19. What are two logical properties of an interface? (Choose two.)

20. Which statement is correct about static NAT?

21. What does the number ‘’2’’ indicate in interface ge―0/1/2?

22. Which two statements about user-defined security zones are correct? (Choose two.)

23. You have configured a UTM feature profile.

Which two additional configuration steps are required for your UTM feature profile to take effect? (Choose two.)

24. Which two statements are correct about the null zone on an SRX Series device? (Choose two.)

25. Which two addresses are valid address book entries? (Choose two.)

26. You want to verify the peer before IPsec tunnel establishment.

What would be used as a final check in this scenario?

27. Which feature would you use to protect clients connected to an SRX Series device from a SYN flood attack?

28. What is the main purpose of using screens on an SRX Series device?

29. You want to implement user-based enforcement of security policies without the requirement of certificates and supplicant software.

Which security feature should you implement in this scenario?

30. You want to block executable files ("exe) from being downloaded onto your network.

Which UTM feature would you use in this scenario?

31. Which statement about service objects is correct?

32. You need to collect the serial number of an SRX Series device to replace it.

Which command will accomplish this task?

33. In J-Web. the management and loopback address configuration option allows you to configure which area?

34. Your company is adding IP cameras to your facility to increase physical security. You are asked to help protect these loT devices from becoming zombies in a DDoS attack.

Which Juniper ATP feature should you configure to accomplish this task?

35. You want to provide remote access to an internal development environment for 10 remote developers.

Which two components are required to implement Juniper Secure Connect to satisfy this requirement? (Choose two.)

36. What are two functions of Juniper ATP Cloud? (Choose two.)

37. You must monitor security policies on SRX Series devices dispersed throughout locations in your organization using a 'single pane of glass' cloud-based solution.

Which solution satisfies the requirement?

38. You are asked to configure your SRX Series device to block all traffic from certain countries. The solution must be automatically updated as IP prefixes become allocated to those certain countries.

Which Juniper ATP solution will accomplish this task?

39. What is the order of the first path packet processing when a packet enters a device?

40. You are asked to verify that a license for AppSecure is installed on an SRX Series device.

In this scenario, which command will provide you with the required information?