Which statement is correct about static NAT?

Static NAT implements unidirectional one-to-one mappings.

Static NAT supports port translation.

Static NAT rules are evaluated after source NAT rules.

Static NAT implements unidirectional one-to-one mappings.

Static NAT implements unidirectional one-to-many mappings.

In J-Web. the management and loopback address configuration option allows you to configure which area?

the IP address of the device management port

the IP address of the primary Gigabit Ethernet port

the IP address of the Network Time Protocol server

the IP address of the device management port

You are installing a new SRX Series device and you are only provided one IP address from your ISP.In this scenario, which NAT solution would you implement?

pool-based NAT with address shifting

Which two statements are correct about IPsec security associations? (Choose two.)

IPsec security associations are bidirectional.

IPsec security associations are established during IKE Phase 2 negotiations.

IPsec security associations are bidirectional.

IPsec security associations are unidirectional.

IPsec security associations are established during IKE Phase 1 negotiations.

IPsec security associations are established during IKE Phase 2 negotiations.

Which statement is correct about Junos security policies?

Security policies enforce rules that should be applied to traffic transiting an SRX Series device.

Security policies determine which users are allowed to access an SRX Series device.

Security policies control the flow of internal traffic within an SRX Series device.

Security policies identity groups of users that have access to different features on an SRX Series device.

Which two statements about the Junos OS CLI are correct? (Choose two.)

The default configuration requires you to log in as the admin user.

Most Juniper devices identify the root login prompt using the > character.

The default configuration requires you to log in as the admin user.

A factory-default login assigns the hostname Amnesiac to the device.

Most Juniper devices identify the root login prompt using the % character.

Most Juniper devices identify the root login prompt using the > character.

Which two statements about user-defined security zones are correct? (Choose two.)

Users can configure multiple security zones.

Users can share security zones between routing instances.

Users cannot share security zones between routing instances.

Users can configure multiple security zones.

Users can share security zones between routing instances.

User-defined security zones do not apply to transit traffic.

Which two statements are true about Juniper ATP Cloud? (Choose two.)

Juniper ATP Cloud is a cloud-based ATP subscription.

Juniper ATP Cloud delivers intrusion protection services.

Juniper ATP Cloud is an on-premises ATP appliance.

Juniper ATP Cloud can be used to block and allow IPs.

Juniper ATP Cloud is a cloud-based ATP subscription.

Juniper ATP Cloud delivers intrusion protection services.

An application firewall processes the first packet in a session for which the application has not yet been identified.In this scenario, which action does the application firewall take on the packet?

It holds the first packet until the application is identified.

It denies the first packet and sends an error message to the user.

It holds the first packet until the application is identified.

Which two statements are correct about the null zone on an SRX Series device? (Choose two.)

The null zone is created by default.

Traffic sent or received by an interface in the null zone is discarded.

The null zone is created by default.

The null zone is a functional security zone.

Traffic sent or received by an interface in the null zone is discarded.

You must enable the null zone before you can place interfaces into it.

Exhibit. Which two statements are correct referring to the output shown in the exhibit? (Choose two.)

FTP and ping access for the Trust-DMZ-Access policy is permitted.

The SSH access for the Trust-DMZ-Block policy is denied.

FTP and ping access for the Trust-DMZ-Access policy is permitted.

FTP and ping access for the Trust-DMZ-Access policy is denied.

The SSH access for the Trust-DMZ-Block policy is permitted.

The SSH access for the Trust-DMZ-Block policy is denied.

Juniper JN0-231 Practice Test 3 - Free Online Exam Questions 81-105

Which three operating systems are supported for installing and running Juniper Secure Connect client software? (Choose three.)

Become a Premium Member for full access

Unlock Premium Member

Juniper JN0-231 Practice Test 3

Question

Drag and Drop

Hot Area

Juniper JN0-231 Practice Tests

Practice Tests