JN0-231 practice questions 11–20

1. Question 11 · 82 in bank

   Which statement about global NAT address persistence is correct?

   • AThe same IP address from a source NAT pool will be assigned for all sessions from a given host.
   • BThe same IP address from a source NAT pool is not guaranteed to be assigned for all sessions from a given host.
   • CThe same IP address from a destination NAT pool will be assigned for all sessions for a given host.
   • DThe same IP address from a destination NAT pool is not guaranteed to be assigned for all sessions for a given host.

   Show answer

   Answer: A

   Next question

2. Question 12 · 82 in bank

   Select 2

   Which two statements are correct about IKE security associations? (Choose two.)

   • AIKE security associations are established during IKE Phase 1 negotiations.
   • BIKE security associations are unidirectional.
   • CIKE security associations are established during IKE Phase 2 negotiations.
   • DIKE security associations are bidirectional.

   Show answer

   Answer: AD

   Next question

3. Question 13 · 82 in bank

   You want to deploy a NAT solution. In this scenario, which solution would provide a static translation without PAT?

   • Ainterface-based source NAT
   • Bpool-based NAT with address shifting
   • Cpool-based NAT with PAT
   • Dpool-based NAT without PAT

   Show answer

   Answer: B

   Next question

4. Question 14 · 82 in bank

   Which Juniper Networks solution uses static and dynamic analysis to search for day-zero malware threats?

   • Afirewall filters
   • BUTM
   • CJuniper ATP Cloud
   • DIPS

   Show answer

   Answer: C

   Next question

5. Question 15 · 82 in bank

   You are configuring an SRX Series device. You have a set of servers inside your private network that need one-to-one mappings to public IP addresses. Which NAT configuration is appropriate in this scenario?

   • Asource NAT with PAT
   • Bdestination NAT
   • CNAT-T
   • Dstatic NAT

   Show answer

   Answer: D

   Next question

6. Question 16 · 82 in bank

   You are deploying an SRX Series firewall with multiple NAT scenarios. In this situation, which NAT scenario takes priority?

   • Ainterface NAT
   • Bsource NAT
   • Cstatic NAT
   • Ddestination NAT

   Show answer

   Answer: C

   Next question

7. Question 17 · 82 in bank

   Select 2

   Your ISP gives you an IP address of 203.0.113.0/27 and informs you that your default gateway is 203.0.113.1. You configure destination NAT to your internal server, but the requests sent to the webserver at 203.0.113.5 are not arriving at the server. In this scenario, which two configuration features need to be added? (Choose two.)

   • Afirewall filter
   • Bsecurity policy
   • Cproxy-ARP
   • DUTM policy

   Show answer

   Answer: BC

   Next question

8. Question 18 · 82 in bank

   Select 2

   Click the Exhibit button.

   

   Referring to the exhibit, which two statements are correct about the ping command? (Choose two.)

   • AThe DMZ routing-instance is the source.
   • BThe 10.10.102.10 IP address is the source.
   • CThe 10.10.102.10 IP address is the destination.
   • DThe DMZ routing-instance is the destination.

   Show answer

   Answer: AC

   Next question

9. Question 19 · 82 in bank

   Which IPsec protocol is used to encrypt the data payload?

   • AESP
   • BIKE
   • CAH
   • DTCP

   Show answer

   Answer: A

   Next question

10. Question 20 · 82 in bank

    Select 3

    What are three primary match criteria used in a Junos security policy? (Choose three.)

    • Aapplication
    • Bsource address
    • Csource port
    • Dclass
    • Edestination address

    Show answer

    Answer: ABE

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-231 practice, question 11. 82 questions available.