Juniper Security, Associate (JNCIA-SEC) - JN0-232 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

You are troubleshooting traffic traversing the SRX Series Firewall and require detailed information showing how the flow module is handling the traffic.
How would you accomplish this task?

A. Enable flow trace options. B. Review the forwarding table. C. Enable firewall filters. D. Review the flow session table.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

Click the Exhibit button.

Referring to the exhibit, which two statements are correct? (Choose two.)

A. This security policy uses a non-default inactivity timeout. B. This security policy is a zone-based security policy. C. This security policy is the second security policy in the list. D. This security policy permits HTTPS traffic.

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

What are two purposes of configuring application sets? (Choose two.)

A. to change the applications referenced in a security policy without editing the security policy B. to organize multiple applications into a single group C. to organize multiple addresses into a single group D. to open dynamic ports used by particular applications for the duration of a session

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

What are two ways that an SRX Series device identifies content? (Choose two.)

A. It uses AppI B. It identifies file types in HTTP, FTP, and e-mail protocols. C. It uses ALGs. D. It identifies and inspects the file extension of each file.

Discussion 0

Correct Answer: A,B Vote an answer

Question 5

You want to enable NextGen Web Filtering in SRX Series devices.
In this scenario, which two actions will accomplish this task? (Choose two.)

A. Configure an SSL proxy profile. B. Generate a self-signed certificate. C. Configure an SSL initiation profile. D. Generate a CA-signed certificate.

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

What are two system-defined zones created on the SRX Series Firewalls? (Choose two.)

A. junos-host B. management C. DMZ D. null

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Which two statements are correct about screens? (Choose two.)

A. A single screen can be associated with multiple security zones. B. Screens are only used on first path traffic. C. Screens only detect IP-based attacks. D. Screens are applied on the security zone of the ingress interface.

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

You are modifying the NAT rule order and you notice that a new NAT rule has been added to the bottom of the list.
In this situation, which command would you use to reorder NAT rules?

A. top B. insert C. up D. run

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

Which type of NAT performs port address translation?

A. static NAT B. destination NAT without port forwarding C. source NAT with address shifting D. interface-based source NAT

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

What is the purpose of a feature profile in a UTM configuration?

A. It defines an object list. B. It applies a UTM feature to a security policy. C. It applies a UTM feature to protocol traffic. D. It defines the operation of a specific UTM feature.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).