JN0-231試験無料問題集（107題）「Juniper Security, Associate (JNCIA-SEC) 認定」

出題：1

Which two features are included with UTM on an SRX Series device? (Choose two.)

A. antivirus

B. content filtering

C. IDP

D. NAT

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

What are three primary match criteria used in a Junos security policy? (Choose three.)

A. source port

B. class

C. source address

D. destination address

E. application

正解：C,D,E 解答を投票する

出題：3

Which two statements about the Junos OS CLI are correct? (Choose two.)

A. Most Juniper devices identify the root login prompt using the > character.

B. Most Juniper devices identify the root login prompt using the % character.

C. The default configuration requires you to log in as the admin user.

D. A factory-default login assigns the hostname Amnesiac to the device.

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

You are assigned a project to configure SRX Series devices to allow connections to your webservers. The webservers have a private IP address, and the packets must use NAT to be accessible from the Internet. The webservers must use the same address for both connections from the Internet and communication with update servers.
Which NAT type must be used to complete this project?

A. static NAT

B. destination NAT

C. source NAT

D. hairpin NAT

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

You are creating Ipsec connections.
In this scenario, which two statements are correct about proxy IDs? (Choose two.)

A. Proxy IDs must match for Phase 2 session establishment.

B. Proxy IDs are used to configure traffic selectors.

C. Proxy IDs default to 0.0.0.0/0 for policy-based VPNs.

D. Proxy IDs are optional for Phase 2 session establishment.

正解：B,D 解答を投票する

出題：6

Which three Web filtering deployment actions are supported by Junos? (Choose three.)

A. Use IPS.

B. Use local lists.

C. Use Websense Redirect.

D. Use remote lists.

E. Use Juniper Enhanced Web Filtering.

正解：B,C,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which statement is correct about static NAT?

A. Static NAT rules are evaluated after source NAT rules.

B. Static NAT implements unidirectional one-to-many mappings.

C. Static NAT supports port translation.

D. Static NAT implements unidirectional one-to-one mappings.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

What must be enabled on an SRX Series device for the reporting engine to create reports?

A. SNMP

B. Packet capture

C. System logging

D. Security logging

正解：D 解答を投票する

出題：9

Which two criteria should a zone-based security policy include? (Choose two.)

A. a destination port

B. a source port

C. zone context

D. an action

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

Which security policy type will be evaluated first?

A. A global policy with a dynamic application set

B. A zone policy with no dynamic application set

C. A global with no dynamic application set

D. A zone policy with a dynamic application set

正解：A 解答を投票する

JN0-231試験無料問題集「Juniper Security, Associate (JNCIA-SEC) 認定」