File Info
| Exam | Security, Specialist (JNCIS-SEC) |
| Number | JN0-230 |
| File Name | Juniper.JN0-230.JuniperTests.2020-11-01.77q.vcex |
| Size | 37 KB |
| Posted | Nov 01, 2020 |
| Download | Juniper.JN0-230.JuniperTests.2020-11-01.77q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
You configure and applied several global policies and some of the policies have overlapping match criteria.
In this scenario, how are these global policies applies?
- The first matched policy is the only policy applied.
- The most restrictive that matches is applied.
- The least restrictive policy that matches is applied.
Correct answer: A
Question 2
Which statement is correct regarding the interface configuration shown in the exhibit?
- The IP address has an invalid subnet mask.
- The interface MTU has been increased.
- The IP address is assigned to unit 0.
- The interface is assigned to the trust zone by default.
Correct answer: C
Question 3
The Sky ATP premium or basic-Threat Feed license is needed for which two features? (Choose two.)
- Outbound protection
- C&C feeds
- Executable inspection
- Custom feeds
Correct answer: BD
Question 4
Which statement is correct about IKE?
- IKE phase 1 is used to establish the data path
- IKE phase 1 only support aggressive mode.
- IKE phase 1 negotiates a secure channel between gateways.
- IKE phase 1 establishes the tunnel between devices
Correct answer: C
Question 5
Which two segments describes IPsec VPNs? (Choose two.)
- IPsec VPN traffic is always authenticated.
- IPsec VPN traffic is always encrypted.
- IPsec VPNs use security to secure traffic over a public network between two remote sites.
- IPsec VPNs are dedicated physical connections between two private networks.
Correct answer: AC
Question 6
Users on the network are restricted from accessing Facebook, however, a recent examination of the logs show that users are accessing Facebook. Why is this problem happening?
- Global rules are honored before zone-based rules.
- The internet-Access rule has a higher precedence value
- The internet-Access rule is listed first
- Zone-based rules are honored before global rules
Correct answer: D
Question 7
You have created a zones-based security policy that permits traffic to a specific webserver for the marketing team. Other groups in the company are not permitted to access the webserver. When marketing users attempt to access the server they are unable to do so. What are two reasons for this access failure?
(Choose two.)
- You failed to change the source zone to include any source zone.
- You failed to position the policy after the policy that denies access to the webserver.
- You failed to commit the policy change.
- You failed to position the policy before the policy that denies access the webserver
Correct answer: CD
Question 8
Which two match conditions would be used in both static NAT and destination NAT rule sets? (Choose two.)
- Destination zone
- Destination address
- Source interface
- Source zone
Correct answer: BD
Question 9
Which statements is correct about global security policies?
- Global policies allow you to regulate traffic with addresses and applications, regardless of their security zones.
- Traffic matching global is not added to the session table.
- Global policies eliminate the need to assign interface to security zones.
- Global security require you to identify a source and destination zone.
Correct answer: A
Question 10
You have configured a Web filtering UTM policy. Which action must be performed before the Web filtering UTM policy takes effect?
- The UTM policy must be linked to an egress interface
- The UTM policy be configured as a routing next hop.
- The UTM policy must be linked to an ingress interface.
- The UTM policy must be linked to a security policy.
Correct answer: D
