Download Security, Associate (JNCIA-SEC).VCEplus.JN0-230.2021-01-13.1e.65q.vcex

Question 1

Which statement is correct about Junos security zones?

• A: User-defined security zones must contain at least one interface.
• B: Logical interfaces are added to user-defined security zones.
• C: Security policies are referenced within a user-defined security zone.
• D: User-defined security zones must contain the key word "zone".

Correct Answer: A

Question 2

Which type of traffic is analyzed by an SRX Series device configured to use an antispam UTM policy?

• A: IMAP
• B: POP3
• C: SMTP
• D: HTTP

Correct Answer: C

Question 3

What is the definition of a zone on an SRX Series device?

• A: a collection of one or more network segments sharing similar security requirements
• B: an individual logical interface with a public IP address
• C: a collection of one or more network segments with different security requirements
• D: an individual logical interface with a private IP address

Correct Answer: A

Question 4

Click the Exhibit button. 

 

You have configured source NAT using an address pool as shown in the exhibit. Traffic is reaching the 203.0.113.6 server but return traffic is not being received by the SRX Series device.
Which feature must be configured to allow return traffic to be accepted by the SRX Series device?

• A: proxy ARP
• B: destination NAT
• C: port forwarding
• D: reverse static NAT

Correct Answer: B

Question 5

Your company uses SRX Series devices to secure the edge of the network. You are asked to protect the company from ransomware attacks.
Which solution will satisfy this requirement?

• A: screens
• B: unified security policies
• C: AppSecure
• D: Sky ATP

Correct Answer: D

Question 6

Which method do VPNs use to prevent outside parties from viewing packets in clear text?

• A: integrity
• B: authentication
• C: encryption
• D: NAT-T

Correct Answer: C

Question 7

What is the correct order of processing when configuring NAT rules and security policies?

• A: destination NAT > policy lookup > source NAT > static NAT 
• B: policy lookup > source NAT > static NAT > destination NAT
• C: source NAT > static NAT > destination NAT > policy lookup 
• D: static NAT > destination NAT > policy lookup > source NAT

Correct Answer: D

Question 8

Which two statements describe IPsec VPNs? (Choose two.)

• A: IPsec VPN traffic is always authenticated.
• B: IPsec VPNs are dedicated physical connections between two private networks.
• C: IPsec VPN traffic is always encrypted.
• D: IPsec VPNs use security measures to secure traffic over a public network between two remote sites.

Correct Answer: AD

Question 9

Which zone is considered a functional zone?

• A: junos host
• B: null
• C: trust
• D: management

Correct Answer: B

Question 10

What does IPsec use to negotiate encryption algorithms?

• A: AH
• B: TLS
• C: IKE
• D: ESP

Correct Answer: C