Juniper JN0-231 Practice Test - Questions Answers, Page 5
Question list
Related questions
What are two valid address books? (Choose two.)
A.
66.129.239.128/25
B.
66.129.239.154/24
C.
66.129.239.0/24
D.
66.129.239.50/25
What is the order of the first path packet processing when a packet enters a device?
A.
security policies –> screens –> zones
B.
screens –> security policies –> zones
C.
screens –> zones –> security policies
D.
security policies –> zones –> screens
Which two components are part of a security zone? (Choose two.)
A.
inet.0
B.
fxp0
C.
address book
D.
ge-0/0/0.0
Which statement is correct about packet mode processing?
A.
Packet mode enables session-based processing of incoming packets.
B.
Packet mode works with NAT, VPNs, UTM, IDP, and other advanced security services.
C.
Packet mode bypasses the flow module.
D.
Packet mode is the basis for stateful processing.
Which two traffic types are considered exception traffic and require some form of special handling by the PFE? (Choose two.)
A.
SSH sessions
B.
ICMP reply messages
C.
HTTP sessions
D.
traceroute packets
What is the correct order in which interface names should be identified?
A.
system slot number –> interface media type –> port number –> line card slot number
B.
system slot number –> port number –> interface media type –> line card slot number
C.
interface media type –> system slot number –> line card slot number –> port number
D.
interface media type –> port number –> system slot number –> line card slot number
What are two characteristics of a null zone? (Choose two.)
A.
The null zone is configured by the super user.
B.
By default, all unassigned interfaces are placed in the null zone.
C.
All ingress and egress traffic on an interface in a null zone is permitted.
D.
When an interface is deleted from a zone, it is assigned back to the null zone.
Which two statements are correct about screens? (Choose two.)
A.
Screens process inbound packets.
B.
Screens are processed on the routing engine.
C.
Screens process outbound packets.
D.
Screens are processed on the flow module.
Which statement about NAT is correct?
A.
Destination NAT takes precedence over static NAT.
B.
Source NAT is processed before security policy lookup.
C.
Static NAT is processed after forwarding lookup.
D.
Static NAT takes precedence over destination NAT.
Which statement is correct about global security policies on SRX Series devices?
A.
The to-zone any command configures a global policy.
B.
The from-zone any command configures a global policy.
C.
Global policies are always evaluated first.
D.
Global policies can include zone context.
Question