JN0-230 Online Training Archives

In the preparation of JN0-230 Juniper Security, Associate (JNCIA-SEC) Exam, the quality of Juniper JN0-230 Juniper Security, Associate (JNCIA-SEC) Exam Online Training is visible through the elements of knowledge and skill practice in a small span of time. Exam4Training also provides 100% money back guarantee to the customers who took the Juniper JN0-230 exam. The JNCIA-SEC JN0-230 is available for practicing the questions and getting full benefits.

Page 1 of 3

1. You want to automatically generate the encryption and authentication keys during IPsec VPN establishment.

What would be used to accomplish this task?

IPsec

Diffie_Hellman

Main mode

Aggregate mode

2. BY default, revenue interface are placed into which system-defined security zone on an SRX series device?

Trust

Null

Junos-trust

untrust

3. On an SRX device, you want to regulate traffic base on network segments.

In this scenario, what do you configure to accomplish this task?

Screens

Zones

ALGs

NAT

4. Which two segments describes IPsec VPNs? (Choose two.)

IPsec VPN traffic is always authenticated.

IPsec VPN traffic is always encrypted.

IPsec VPNs use security to secure traffic over a public network between two remote sites.

IPsec VPNs are dedicated physical connections between two private networks.

5. Exhibit.

Which statement is correct regarding the interface configuration shown in the exhibit?

The interface MTU has been increased.

The IP address has an invalid subnet mask.

The IP address is assigned to unit 0.

The interface is assigned to the trust zone by default.

6. Which flow module components handles processing for UTM?

Policy

Zones

Services

Screen options

7. Which two match conditions would be used in both static NAT and destination NAT rule sets? (Choose two.)

Destination zone

Destination interface

Source interface

Source zone

8. Which statement about IPsec is correct?

IPsec can be used to transport native Layer 2 packets.

IPsec can provide encapsulation but not encryption

IPsec is a standards-based protocol.

IPsec is used to provide data replication

9. Which two statements are true about the null zone? (Choose two.)

All interface belong to the bull zone by default.

All traffic to the null zone is dropped.

All traffic to the null zone is allowed

The null zone is a user-defined zone

10. Which statements is correct about Junos security zones?

User-defined security must contain at least one interface.

Security policies are referenced within a user-defined security zone.

Logical interface are added to user defined security zones

User-defined security must contains the key word ‘’zone’’

Page 2 of 3

11. What should you configure if you want to translate private source IP address to a single public IP address?

Source NAT

Destination NAT

Content filtering

Security Director

12. You are configuring an IPsec VPN tunnel between two location on your network. Each packet must be encrypted and authenticated.

Which protocol would satisfy these requirements?

MD5

ESP

SHA

13. You have created a zones-based security policy that permits traffic to a specific webserver for the marketing team. Other groups in the company are not permitted to access the webserver. When marketing users attempt to access the server they are unable to do so.

What are two reasons for this access failure? (Choose two.)

You failed to change the source zone to include any source zone.

You failed to position the policy after the policy that denies access to the webserver.

You failed to commit the policy change.

You failed to position the policy before the policy that denies access the webserver

14. Referring to the exhibit.

Users on the network are restricted from accessing Facebook, however, a recent examination of the logs show that users are accessing Facebook.

Why is this problem happening?

Global rules are honored before zone-based rules.

The internet-Access rule has a higher precedence value

The internet-Access rule is listed first

Zone-based rules are honored before global rules

15. On an SRX Series device, how should you configure your IKE gateway if the remote endpoint is a branch office-using a dynamic IP address?

Configure the IPsec policy to use MDS authentication.

Configure the IKE policy to use aggressive mode.

Configure the IPsec policy to use aggressive mode.

Configure the IKE policy to use a static IP address

16. Which statements is correct about SKY ATP?

Sky ATP is an open-source security solution.

Sky ATP is used to automatically push out changes to the AppSecure suite.

Sky ATP only support sending threat feeds to vSRX Series devices

Sky ATP is a cloud-based security threat analyzer that performs multiple tasks

17. Which type of security policy protect restricted services from running on non-standard ports?

Application firewall

IDP

Sky ATP

antivirus

18. Referring to the exhibit.

Users should not have access to Facebook, however, a recent examination of the logs security show that users are accessing Facebook.

what should you do to solve this problem?

Change the source address for the Block-Facebook-Access rule to the prefix of the users

Move the Block-Facebook-Access rule before the Internet-Access rule

Move the Block-Facebook-Access rule from a zone policy to a global policy

Change the Internet-Access rule from a zone policy to a global policy

19. Which statement is correct about IKE?

IKE phase 1 is used to establish the data path

IKE phase 1 only support aggressive mode.

IKE phase 1 negotiates a secure channel between gateways.

IKE phase 1 establishes the tunnel between devices

20. Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)

With global-based policies, you do not need to specify a destination zone in the match criteria.

With global-based policies, you do not need to specify a source zone in the match criteria.

With global-based policies, you do not need to specify a destination address in the match criteria.

With global-based policies, you do not need to specify a source address in the match criteria.

Page 3 of 3

21. Which two private cloud solution support vSRX devices? (Choose two.)

Microsoft Azure

Amazon Web Services (AWS)

VMware Web Services (AWS)

VMware NSX

Contrail Cloud

22. You want to integrate an SRX Series device with SKY ATP.

What is the first action to accomplish task?

Issue the commit script to register the SRX Series device.

Copy the operational script from the Sky ATP Web U

Create an account with the Sky ATP Web U

Create the SSL VPN tunnel between the SRX Series device and Sky AT

23. What are the valid actions for a source NAT rule in J-Web? (choose three.)

Off

Pool

Source

interface

24. What must you do first to use the Monitor/Alarms/Policy Log workspace in J-Web?

You must enable logging that uses the SD-Syslog format.

You must enable security logging that uses the TLS transport mode.

You must enable stream mode security logging on the SRX Series device.

You must enable event mode security logging on the SRX Series device.

25. Which statement about IPsec is correct?

IPsec can provide encryption but not data integrity.

IPsec support packet fragmentation by intermediary devices.

IPsec support both tunnel and transport modes.

IPsec must use certificates to provide data encryption