JN0-231 Exam Questions

What are two characteristic of static NAT SRX Series devices? (Choose two.)

The free licensing model for Sky ATP includes which features? (Choose two.)

Which two feature on the SRX Series device are common across all Junos devices? (Choose two.)

Which two statements are correct about IKE security associations? (Choose two.)

You want to deploy a NAT solution. In this scenario, which solution would provide a static translation without PAT?

Which Juniper Networks solution uses static and dynamic analysis to search for day-zero malware threats?

You are configuring an SRX Series device. You have a set of servers inside your private network that need one-to-one mappings to public IP addresses. Which NAT configuration is app...

You want to provide remote access to an internal development environment for 10 remote developers. Which two components are required to implement Juniper Secure Connect to satisfy...

You are deploying an SRX Series firewall with multiple NAT scenarios. In this situation, which NAT scenario takes priority?

Your ISP gives you an IP address of 203.0.113.0/27 and informs you that your default gateway is 203.0.113.1. You configure destination NAT to your internal server, but the requests...

Click the Exhibit button. Referring to the exhibit, which two statements are correct about the ping command? (Choose two.)

Which IPsec protocol is used to encrypt the data payload?

What are three primary match criteria used in a Junos security policy? (Choose three.)

You have an FTP server and a webserver on the inside of your network that you want to make available to users outside of the network. You are allocated a single public IP address....

When configuring antispam, where do you apply any local lists that are configured?

Screens on an SRX Series device protect against which two types of threats? (Choose two.)

Which statement about global NAT address persistence is correct?

You are asked to configure your SRX Series device to block all traffic from certain countries. The solution must be automatically updated as IP prefixes become allocated to those c...

Which three Web filtering deployment actions are supported by Junos? (Choose three.)

Which two IPsec hashing algorithms are supported on an SRX Series device? (Choose two.)

Click the Exhibit button. What is the purpose of the host-inbound-traffic configuration shown in the exhibit?

When operating in packet mode, which two services are available on the SRX Series device? (Choose two.)

Which two statements are correct about the default behavior on SRX Series devices? (Choose two.)

Which two statements are correct about functional zones? (Choose two.)

What must be enabled on an SRX Series device for the reporting engine to create reports?

When creating a site-to-site VPN using the J-Web shown in the exhibit, which statement is correct?

What must be enabled on an SRX Series device for the reporting engine to create reports?

Which two statements are correct about the integrated user firewall feature?(Choose two.)

Which security policy type will be evaluated first?

What does the number "2'' indicate in interface ge--0/1/2?

Which statement about service objects is correct?

You want to block executable files ("exe) from being downloaded onto your network. Which UTM feature would you use in this scenario?

What are two Juniper ATP Cloud feed analysis components? (Choose two.)

Which two statements are correct about global policies? (Choose two.)

Which statement is correct about Web filtering?

You have configured a UTM feature profile. Which two additional configuration steps are required for your UTM feature profile to take effect? (Choose two.)

You want to verify the peer before IPsec tunnel establishment. What would be used as a final check in this scenario?

Which feature would you use to protect clients connected to an SRX Series device from a SYN flood attack?

What is the default value of the dead peer detection (DPD) interval for an IPsec VPN tunnel?

What is the main purpose of using screens on an SRX Series device?

What are two functions of Juniper ATP Cloud? (Choose two.)

Which three operating systems are supported for installing and running Juniper Secure Connect client software? (Choose three.)

You want to implement user-based enforcement of security policies without the requirement of certificates and supplicant software. Which security feature should you implement in th...

Which statement is correct about static NAT?

In J-Web. the management and loopback address configuration option allows you to configure which area?

You are installing a new SRX Series device and you are only provided one IP address from your ISP. In this scenario, which NAT solution would you implement?

Which two statements are correct about IPsec security associations? (Choose two.)

You must monitor security policies on SRX Series devices dispersed throughout locations in your organization using a 'single pane of glass' cloud-based solution. Which solution sat...

What is the number of concurrent Secure Connect user licenses that an SRX Series device has by default?

You need to collect the serial number of an SRX Series device to replace it. Which command will accomplish this task?