Free JN0-231 Exam Braindumps

Pass your Security - Associate (JNCIA-SEC) exam with these free Questions and Answers

Page 3 of 21
QUESTION 6

Which statement is correct about Web filtering?

  1. A. The Juniper Enhanced Web Filtering solution requires a locally managed server.
  2. B. The decision to permit or deny is based on the body content of an HTTP packet.
  3. C. The decision to permit or deny is based on the category to which a URL belongs.
  4. D. The client can receive an e-mail notification when traffic is blocked.

Correct Answer: C
Web filtering is a feature that allows administrators to control access to websites by categorizing URLs into different categories such as gambling, social networking, or adult content. The decision to permit or deny access to a website is based on the category to which a URL belongs. This is done by comparing the URL against a database of categorized websites and making a decision based on the policy defined by the administrator.

QUESTION 7

When configuring antispam, where do you apply any local lists that are configured?

  1. A. custom objects
  2. B. advanced security policy
  3. C. antispam feature-profile
  4. D. antispam UTM policy

Correct Answer: A
user@host# set security utm custom-objects url-pattern url-pattern-name https://www.juniper.net/documentation/us/en/software/junos/utm/topics/topic-map/security-local-list-antispam-f

QUESTION 8

When operating in packet mode, which two services are available on the SRX Series device? (Choose two.)

  1. A. MPLS
  2. B. UTM
  3. C. CoS
  4. D. IDP

Correct Answer: AC

QUESTION 9

Which two statements are correct about IKE security associations? (Choose two.)

  1. A. IKE security associations are established during IKE Phase 1 negotiations.
  2. B. IKE security associations are unidirectional.
  3. C. IKE security associations are established during IKE Phase 2 negotiations.
  4. D. IKE security associations are bidirectional.

Correct Answer: AD

QUESTION 10

You have an FTP server and a webserver on the inside of your network that you want to make available to users outside of the network. You are allocated a single public IP address.
In this scenario, which two NAT elements should you configure? (Choose two.)

  1. A. destination NAT
  2. B. NAT pool
  3. C. source NAT
  4. D. static NAT

Correct Answer: AB
With single Ip address it is port forwarding. So, destination NAT and a pool address point to the single public IP of the internet facing interface.

Page 3 of 21

Post your Comments and Discuss Juniper JN0-231 exam with other Community members: