JN0-231試験無料問題集（107題）「Juniper Security, Associate (JNCIA-SEC) 認定」

出題：1

Which two statements are correct about the default behavior on SRX Series devices? (Choose two.)

A. The SRX Series device is in packet mode.

B. The SRX Series device is in flow mode.

C. The SRX Series device supports stateless firewalls filters.

D. The SRX Series device does not support stateless firewall filters.

正解：B,C 解答を投票する

出題：2

Which two statements are correct about functional zones? (Choose two.)

A. Functional zones must have a user-defined name.

B. Functional zone cannot be referenced in security policies or pass transit traffic.

C. Multiple types of functional zones can be defined by the user.

D. Functional zones are used for out-of-band device management.

正解：B,D 解答を投票する

出題：3

You want to verify the peer before IPsec tunnel establishment.
What would be used as a final check in this scenario?

A. perfect forward secrecy

B. traffic selector

C. st0 interfaces

D. proxy ID

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

You are asked to verify that a license for AppSecure is installed on an SRX Series device.
In this scenario, which command will provide you with the required information?

A. user@srx> show chassis firmware

B. user@srx> show configuration system

C. user@srx> show system license

D. user@srx> show services accounting

正解：C 解答を投票する

出題：5

What is the default value of the dead peer detection (DPD) interval for an IPsec VPN tunnel?

A. 5 seconds

B. 10 seconds

C. 40 seconds

D. 20 seconds

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which two statements are correct about the null zone on an SRX Series device? (Choose two.)

A. Traffic sent or received by an interface in the null zone is discarded.

B. The null zone is created by default.

C. You must enable the null zone before you can place interfaces into it.

D. The null zone is a functional security zone.

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which statement is correct about global security policies on SRX Series devices?

A. Global policies are always evaluated first.

B. Global policies can include zone context.

C. The from-zone any command configures a global policy.

D. The to-zone any command configures a global policy.

正解：B 解答を投票する

出題：8

What is the order in which malware is detected and analyzed?

A. cache lookup -> antivirus scanning -> static analysis -> dynamic analysis

B. cache lookup -> static analysis -> dynamic analysis -> antivirus scanning

C. antivirus scanning -> cache lookup -> dynamic analysis -> static analysis

D. antivirus scanning -> cache lookup -> static analysis -> dynamic analysis

正解：A 解答を投票する

出題：9

What is the number of concurrent Secure Connect user licenses that an SRX Series device has by default?

A. 2

B. 4

C. 5

D. 3

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

You are asked to configure your SRX Series device to block all traffic from certain countries. The solution must be automatically updated as IP prefixes become allocated to those certain countries.
Which Juniper ATP solution will accomplish this task?

A. Geo IP

B. C&C feed

C. unified security policies

D. IDP

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

JN0-231試験無料問題集「Juniper Security, Associate (JNCIA-SEC) 認定」