JN0-231試験無料問題集（107題）「Juniper Security, Associate (JNCIA-SEC) 認定」

出題：1

You are assigned a project to configure SRX Series devices to allow connections to your webservers. The webservers have a private IP address, and the packets must use NAT to be accessible from the Internet. You do not want the webservers to initiate connections with external update servers on the Internet using the same IP address as customers use to access them.
Which two NAT types must be used to complete this project? (Choose two.)

A. static NAT

B. destination NAT

C. source NAT

D. hairpin NAT

正解：B,C 解答を投票する

出題：2

You want to enable the minimum Juniper ATP services on a branch SRX Series device.
In this scenario, what are two requirements to accomplish this task? (Choose two.)

A. Install a basic Juniper ATP license on the branch device.

B. Configure the juniper-atp user account on the branch device.

C. Execute the Juniper ATP script on the branch device.

D. Register for a Juniper ATP account on https://sky.junipersecurity.net.

正解：C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Which two IKE Phase 1 configuration options must match on both peers to successfully establish a tunnel? (Choose two.)

A. IKE mode

B. Diffie-Hellman group

C. gateway interfaces

D. VPN name

正解：A,B 解答を投票する

出題：4

What is an IP addressing requirement for an IPsec VPN using main mode?

A. One peer must have dynamic IP addressing.

B. Both peers must have static IP addressing.

C. One peer must have static IP addressing.

D. Both peers must have dynamic IP addresses.

正解：B 解答を投票する

出題：5

Which two statements are correct about the null zone on an SRX Series device? (Choose two.)

A. Traffic sent or received by an interface in the null zone is discarded.

B. The null zone is created by default.

C. You must enable the null zone before you can place interfaces into it.

D. The null zone is a functional security zone.

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which two statements are correct about screens? (Choose two.)

A. Screens are processed on the flow module.

B. Screens process outbound packets.

C. Screens are processed on the routing engine.

D. Screens process inbound packets.

正解：A,D 解答を投票する

出題：7

Which two user authentication methods are supported when using a Juniper Secure Connect VPN? (Choose two.)

A. active directory

B. certificate-based

C. local authentication

D. multi-factor authentication

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

You want to implement user-based enforcement of security policies without the requirement of certificates and supplicant software.
Which security feature should you implement in this scenario?

A. integrated user firewall

B. screens

C. Juniper ATP

D. 802.1X

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

The UTM features are performed during which process of the SRX Series device's packet flow?

A. screens

B. zones

C. security policies

D. services

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

What are two valid address books? (Choose two.)

A. 66.129.239.0/24

B. 66.129.239.128/25

C. 66.129.239.50/25

D. 66.129.239.154/24

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

JN0-231試験無料問題集「Juniper Security, Associate (JNCIA-SEC) 認定」