JN0-231試験無料問題集（107題）「Juniper Security, Associate (JNCIA-SEC) 認定」

出題：1

Which statement is correct about global security policies on SRX Series devices?

A. Global policies are always evaluated first.

B. Global policies can include zone context.

C. The from-zone any command configures a global policy.

D. The to-zone any command configures a global policy.

正解：B 解答を投票する

出題：2

What are two valid address books? (Choose two.)

A. 66.129.239.0/24

B. 66.129.239.128/25

C. 66.129.239.50/25

D. 66.129.239.154/24

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

You want to verify the peer before IPsec tunnel establishment.
What would be used as a final check in this scenario?

A. perfect forward secrecy

B. traffic selector

C. st0 interfaces

D. proxy ID

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

The UTM features are performed during which process of the SRX Series device's packet flow?

A. screens

B. zones

C. security policies

D. services

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which two statements are correct about global policies? (Choose two.)

A. Global policies must reference zone contexts.

B. Global policies are evaluated before default policies.

C. Global policies are evaluated after default policies.

D. Global policies do not have to reference zone context.

正解：B,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

You have multiple branch locations using an SRX Series device. You want a cloud-based solution to configure and monitor this device.
this scenario, which solution would you use?

A. J-Web

B. Junos Space Security Director

C. Juniper Secure Analytics

D. Juniper Sky Enterprise

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

You are creating Ipsec connections.
In this scenario, which two statements are correct about proxy IDs? (Choose two.)

A. Proxy IDs must match for Phase 2 session establishment.

B. Proxy IDs are used to configure traffic selectors.

C. Proxy IDs default to 0.0.0.0/0 for policy-based VPNs.

D. Proxy IDs are optional for Phase 2 session establishment.

正解：B,D 解答を投票する

出題：8

You want to implement user-based enforcement of security policies without the requirement of certificates and supplicant software.
Which security feature should you implement in this scenario?

A. integrated user firewall

B. screens

C. Juniper ATP

D. 802.1X

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

What are three primary match criteria used in a Junos security policy? (Choose three.)

A. source port

B. class

C. source address

D. destination address

E. application

正解：C,D,E 解答を投票する

出題：10

Which two services does Juniper Connected Security provide? (Choose two.)

A. protection against zero-day threats

B. inline malware blocking

C. Layer 2 VPN tunnels

D. IPsec VPNs

正解：A,B 解答を投票する

JN0-231試験無料問題集「Juniper Security, Associate (JNCIA-SEC) 認定」