What is the order of the first path packet processing when a packet enters a device?

screens –> zones –> security policies

security policies –> screens –> zones

screens –> security policies –> zones

screens –> zones –> security policies

security policies –> zones –> screens

Which statement is correct about packet mode processing?

Packet mode bypasses the flow module.

Packet mode enables session-based processing of incoming packets.

Packet mode works with NAT, VPNs, UTM, IDP, and other advanced security services.

Packet mode bypasses the flow module.

Packet mode is the basis for stateful processing.

What is the correct order in which interface names should be identified?

interface media type –> system slot number –> line card slot number –> port number

system slot number –> interface media type –> port number –> line card slot number

system slot number –> port number –> interface media type –> line card slot number

interface media type –> system slot number –> line card slot number –> port number

interface media type –> port number –> system slot number –> line card slot number

What are two characteristics of a null zone? (Choose two.)

By default, all unassigned interfaces are placed in the null zone.

When an interface is deleted from a zone, it is assigned back to the null zone.

The null zone is configured by the super user.

By default, all unassigned interfaces are placed in the null zone.

All ingress and egress traffic on an interface in a null zone is permitted.

When an interface is deleted from a zone, it is assigned back to the null zone.

Which two statements are correct about screens? (Choose two.)

Screens process inbound packets.

Screens are processed on the flow module.

Screens process inbound packets.

Screens are processed on the routing engine.

Screens process outbound packets.

Screens are processed on the flow module.

Which statement about NAT is correct?

Static NAT takes precedence over destination NAT.

Destination NAT takes precedence over static NAT.

Source NAT is processed before security policy lookup.

Static NAT is processed after forwarding lookup.

Static NAT takes precedence over destination NAT.

Which statement is correct about global security policies on SRX Series devices?

Global policies can include zone context.

The to-zone any command configures a global policy.

The from-zone any command configures a global policy.

Global policies are always evaluated first.

Global policies can include zone context.

Which statement is correct about unified security policies on an SRX Series device?

A zone-based policy is always evaluated first.

The most restrictive policy is applied regardless of the policy level.

A global policy is always evaluated first.

The first policy rule is applied regardless of the policy level.

Click the Exhibit button. You are asked to allow only ping and SSH access to the security policies shown in the exhibit.Which statement will accomplish this task?

Insert policy Rule-2 before policy Rule-1.

Rename policy Rule-2 to policy Rule-0.

Insert policy Rule-2 before policy Rule-1.

Replace application any with application [junos-ping junos-ssh] in policy Rule-1.

Rename policy Rule-1 to policy Rule-3.

Which order is correct for Junos security devices that examine policies for transit traffic?

zone policiesglobal policiesdefault policies

default policieszone policiesglobal policies

default policiesglobal policieszone policies

global policieszone policiesdefault policies

What is an IP addressing requirement for an IPsec VPN using main mode?

Both peers must have static IP addressing.

One peer must have dynamic IP addressing.

One peer must have static IP addressing.

Both peers must have dynamic IP addresses.

Both peers must have static IP addressing.

What does the number "2" indicate in interface ge-0/1/2?

the physical interface card (PIC)

the flexible PIC concentrator (FPC)

You are investigating a communication problem between two hosts and have opened a session on the SRX Series device closest to one of the hosts and entered the show security flow session command.What information will this command provide? (Choose two.)

The IP address of the host that initiates the session.

The security policy name that is controlling the session.

The total active time of the session.

The end-to-end data path that the packets are taking.

The IP address of the host that initiates the session.

The security policy name that is controlling the session.

When creating a site-to-site VPN using the J-Web shown in the exhibit, which statement is correct?

Privately routable IP addresses are required.

The remote gateway is configured automatically based on the local gateway settings.

RIP, OSPF, and BGP are supported under Routing mode.

The authentication method is pre-shared key or certificate based.

Privately routable IP addresses are required.

Which two statements are correct about the integrated user firewall feature?(Choose two.)

It maps IP addresses to individual users.

It allows tracking of non-Windows Active Directory users.

It maps IP addresses to individual users.

It allows tracking of non-Windows Active Directory users.

Which security policy type will be evaluated first?

A global policy with a dynamic application set

A zone policy with no dynamic application set

A global with no dynamic application set

A zone policy with a dynamic application set

A global policy with a dynamic application set

What does the number ''2'' indicate in interface ge—0/1/2?

The physical interface card (PIC)

The flexible PIC concentrator (FPC)

Which statement about service objects is correct?

All applications are either custom or Junos defined.

All applications are predefined by Junos.

All applications are custom defined by the administrator.

All applications are either custom or Junos defined.

All applications in service objects are not available on the vSRX Series device.

Which two statements are correct about global policies? (Choose two.)

Global policies do not have to reference zone context.

Global policies are evaluated before default policies.

Global policies are evaluated after default policies.

Global policies do not have to reference zone context.

Global policies are evaluated before default policies.

Global policies must reference zone contexts.

Which statement is correct about Web filtering?

The decision to permit or deny is based on the category to which a URL belongs.

The Juniper Enhanced Web Filtering solution requires a locally managed server.

The decision to permit or deny is based on the body content of an HTTP packet.

The decision to permit or deny is based on the category to which a URL belongs.

The client can receive an e-mail notification when traffic is blocked.

You have configured a UTM feature profile.Which two additional configuration steps are required for your UTM feature profile to take effect?(Choose two.)

Associate the UTM policy with a security policy.

Associate the UTM feature profile with a UTM policy.

Associate the UTM policy with an address book.

Associate the UTM policy with a firewall filter.

Associate the UTM policy with a security policy.

Associate the UTM feature profile with a UTM policy.

What is the main purpose of using screens on an SRX Series device?

to provide protection against common DoS attacks

to provide multiple ports for accessing security zones

to provide an alternative interface into the CLI

to provide protection against common DoS attacks

to provide information about traffic patterns traversing the network

Juniper JN0-231 Practice Test 2 - Free Online Exam Prep & Questions

Question 1 / 40

What are two valid address books? (Choose two.)

66.129.239.128/25

66.129.239.154/24

66.129.239.0/24

66.129.239.50/25

Comment (0)

Juniper JN0-231 Practice Test 2

Question

Juniper JN0-231 Practice Tests

Practice Tests