JN0-230 by Juniper Valid Free Exam Practice Test

Question 1

What should you configure if you want to translate private source IP address to a single public IP address?

A. Security Director B. Destination NAT C. Content filtering D. Source NAT

Correct Answer: D

Question 2

You want to generate reports from the l-Web on an SRX Series device.
Which logging mode would you use in this scenario?

A. Stream B. Event C. local D. Syslog

Correct Answer: A

Question 3

Which statements is correct about global security policies?

A. Global policies allow you to regulate traffic with addresses and applications, regardless of their security zones. B. Global policies eliminate the need to assign interface to security zones. C. Traffic matching global is not added to the session table. D. Global security require you to identify a source and destination zone.

Correct Answer: A

Question 4

What must you do first to use the Monitor/Events workspace in the j-Web interface?

A. You must enable event mode security logging on the SRX Series device. B. You must enable stream mode security logging on the SRX Series device C. You must enable security logging that uses the SD-Syslog format. D. You must enable security logging that uses the TLS transport mode.

Correct Answer: A

Question 5

What does IPsec use to negotiate encryption algorithms?

A. IKE B. AH C. TLS D. ESP

Correct Answer: D

Question 6

BY default, revenue interface are placed into which system-defined security zone on an SRX series device?

A. untrust B. Null C. Trust D. Junos-trust

Correct Answer: A

Question 7

Which three actions would be performed on traffic traversing an IPsec VPAN? (Choose three.)

A. Port forwarding B. Authentication C. Deep inspection D. Payload verification E. Encryption

Correct Answer: B,D,E

Question 8

Which statement is correct about IKE?

A. IKE phase 1 is used to establish the data path B. IKE phase 1 establishes the tunnel between devices C. IKE phase 1 only support aggressive mode. D. IKE phase 1 negotiates a secure channel between gateways.

Correct Answer: D

Question 9

Exhibit.

Which two statements are true? (Choose two.)

A. Traffic static for this security policy are not generated. B. Traffic statistics for this security policy are generated. C. Logs for this security policy are not generated. D. Logs for this security policy are generated.

Correct Answer: B,D

Juniper Security, Associate (JNCIA-SEC) - JN0-230 Exam Practice Test