JN0-230 Exam Questions

Your company uses SRX Series devices to secure the edge of the network. You are asked protect the company from ransom ware attacks. Which solution will satisfy this requirement?

Firewall filters define which type of security?

Which method do VPNs use to prevent outside parties from viewing packet in clear text?

Referring to the exhibit. You have configured antispam to allow e-mail from example.com, however the logs you see that [email protected] is blocked What are two ways to solve this...

You configure and applied several global policies and some of the policies have overlapping match criteria.

Which UTM feature should you use to protect users from visiting certain blacklisted websites?

You verify that the SSH service is configured correctly on your SRX Series device, yet administrators attempting to connect through a revenue port are not able to connect. In this...

Which management software supports metadata-based security policies that are ideal for cloud deployments?

Your company has been assigned one public IP address. You want to enable internet traffic to reach multiple servers in your DMZ that are configured with private address. In this sc...

Users in your network are downloading files with file extensions that you consider to be unsafe for your network. You must prevent files with specific file extensions from entering...

Referring to the exhibit. Which type of NAT is being performed?

Referring to the exhibit, Host-inbound-traffic is configured on the DMZ zone and the ge-0/0/9.0 interface attached to that zone. Which to types of management traffic would be perfo...

What is the correct order of processing when configuring NAT rules and security policies?

Which two statements are correct about functional zones? (Choose two.)

Which two actions are performed on an incoming packet matching an existing session? (Choose two.)

You have configured a Web filtering UTM policy? Which action must be performed before the Web filtering UTM policy takes effect?

If you need to protect against malicious files that might be download through Web-based e-mail, which Sky ATP protection mechanism should you use?

Which of the following are supported Mini-Physical Interface Modules (Mini-PIMs) on an SRX Series Services Gateways? (Choose three.)

You want to automatically generate the encryption and authentication keys during IPsec VPN establishment. What would be used to accomplish this task?

BY default, revenue interface are placed into which system-defined security zone on an SRX series device?

On an SRX device, you want to regulate traffic base on network segments. In this scenario, what do you configure to accomplish this task?

Which two segments describes IPsec VPNs? (Choose two.)

Which statement is correct regarding the interface configuration shown in the exhibit?

Which flow module components handles processing for UTM?

Which two match conditions would be used in both static NAT and destination NAT rule sets? (Choose two.)

Which statement about IPsec is correct?

Which two statements are true about the null zone? (Choose two.)

The vSRX is available for which two of the following hypervisors? (Choose two.)

You are configuring an SRX Series device to inter-operate with a third-party IPsec VPN endpoint that uses policies to create the VPN. In this scenario, what must be configured for...

Which statements is correct about Junos security zones?

What should you configure if you want to translate private source IP address to a single public IP address?

You are configuring an IPsec VPN tunnel between two location on your network. Each packet must be encrypted and authenticated. Which protocol would satisfy these requirements?

You have created a zones-based security policy that permits traffic to a specific webserver for the marketing team. Other groups in the company are not permitted to access the webs...

Referring to the exhibit, Users on the network are restricted from accessing Facebook, however, a recent examination of the logs show that users are accessing Facebook. Why is this...

What match criteria does an SRX Series device's network processing unit (NPU) use to determine if a flow already exists for a packet? (Choose three.)

After a packet is not able to be matched to an existing session, what is the next service to inspect the packet?

Which statement about IPsec is correct?

The Sky ATP premium or basic-Threat Feed license is needed fort which two features? (Choose two.)

Which three actions would be performed on traffic traversing an IPsec VPAN? (Choose three.)

Which type of NAT is performed by the SRX Series device?

Which two notifications are available when the antivirus engine detects and infected file? (Choose two.)

You are concerned that unauthorized traffic is using non-standardized ports on your network. In this scenario, which type of security feature should you implement?

What are configuring the antispam UTM feature on an SRX Series device. Which two actions would be performed by the SRX Series device for e-mail that is identified as spam? (Choose...

A new SRX Series device has been delivered to your location. The device has the factory-default configuration loaded. You have powered on the device and connected to the console po...

Which statements is correct about global security policies?

Which two statements are true about security policy actions? (Choose two.)

When traffic has met match criteria, what options are available to be performed on the traffic? (Choose three.)

In the context of SRX Series devices, what services does fast-path processing skip? (Choose two.)

On an SRX Series device, how should you configure your IKE gateway if the remote endpoint is a branch office-using a dynamic IP address?

Which statements is correct about SKY ATP?