Practice Free JN0-231 Exam Online Questions
You are asked to configure your SRX Series device to block all traffic from certain countries. The solution must be automatically updated as IP prefixes become allocated to those certain countries.
Which Juniper ATP solution will accomplish this task?
- A . Geo IP
- B . unified security policies
- C . IDP
- D . C&C feed
You are assigned a project to configure SRX Series devices to allow connections to your webservers. The webservers have a private IP address, and the packets must use NAT to be accessible from the
Internet. The webservers must use the same address for both connections from the Internet and communication with update servers.
Which NAT type must be used to complete this project?
- A . source NAT
- B . destination NAT
- C . static NAT
- D . hairpin NAT
You are assigned a project to configure SRX Series devices to allow connections to your webservers. The webservers have a private IP address, and the packets must use NAT to be accessible from the
Internet. You do not want the webservers to initiate connections with external update servers on the Internet using the same IP address as customers use to access them.
Which two NAT types must be used to complete this project? (Choose two.)
- A . static NAT
- B . hairpin NAT
- C . destination NAT
- D . source NAT
What does the number “2” indicate in interface ge-0/1/2?
- A . the physical interface card (PIC)
- B . the flexible PIC concentrator (FPC)
- C . the interface logical number
- D . the port number
Click the Exhibit button.
You are asked to allow only ping and SSH access to the security policies shown in the exhibit.
Which statement will accomplish this task?
- A . Rename policy Rule-2 to policy Rule-0.
- B . Insert policy Rule-2 before policy Rule-1.
- C . Replace application any with application [junos-ping junos-ssh] in policy Rule-1.
- D . Rename policy Rule-1 to policy Rule-3.
You want to provide remote access to an internal development environment for 10 remote developers.
Which two components are required to implement Juniper Secure Connect to satisfy this requirement? (Choose two.)
- A . an additional license for an SRX Series device
- B . Juniper Secure Connect client software
- C . an SRX Series device with an SPC3 services card
- D . Marvis virtual network assistant
Which order is correct for Junos security devices that examine policies for transit traffic?
- A . zone policies
global policies
default policies - B . default policies
zone policies
global policies - C . default policies
global policies
zone policies - D . global policies
zone policies
default policies
What are three Junos UTM features? (Choose three.)
- A . screens
- B . antivirus
- C . Web filtering
- D . IDP/IPS
- E . content filtering
Which two statements are correct about the default behavior on SRX Series devices? (Choose two.)
- A . The SRX Series device is in flow mode.
- B . The SRX Series device supports stateless firewalls filters.
- C . The SRX Series device is in packet mode.
- D . The SRX Series device does not support stateless firewall filters.
You are configuring an SRX Series device. You have a set of servers inside your private network that need one-to-one mappings to public IP addresses.
Which NAT configuration is appropriate in this scenario?
- A . source NAT with PAT
- B . destination NAT
- C . NAT-T
- D . static NAT