JN0-231 practice questions 41–50

1. Question 41 · 82 in bank

   What is the order of the first path packet processing when a packet enters a device?

   • Asecurity policies –> screens –> zones
   • Bscreens –> security policies –> zones
   • Cscreens –> zones –> security policies
   • Dsecurity policies –> zones –> screens

   Show answer

   Answer: C

   Next question

2. Question 42 · 82 in bank

   Select 2

   Which two components are part of a security zone? (Choose two.)

   • Ainet.0
   • Bfxp0
   • Caddress book
   • Dge-0/0/0.0

   Show answer

   Answer: CD

   Next question

3. Question 43 · 82 in bank

   Which statement is correct about packet mode processing?

   • APacket mode enables session-based processing of incoming packets.
   • BPacket mode works with NAT, VPNs, UTM, IDP, and other advanced security services.
   • CPacket mode bypasses the flow module.
   • DPacket mode is the basis for stateful processing.

   Show answer

   Answer: C

   Next question

4. Question 44 · 82 in bank

   Select 2

   Which two traffic types are considered exception traffic and require some form of special handling by the PFE? (Choose two.)

   • ASSH sessions
   • BICMP reply messages
   • CHTTP sessions
   • Dtraceroute packets

   Show answer

   Answer: BD

   Next question

5. Question 45 · 82 in bank

   What is the correct order in which interface names should be identified?

   • Asystem slot number –> interface media type –> port number –> line card slot number
   • Bsystem slot number –> port number –> interface media type –> line card slot number
   • Cinterface media type –> system slot number –> line card slot number –> port number
   • Dinterface media type –> port number –> system slot number –> line card slot number

   Show answer

   Answer: C

   Next question

6. Question 46 · 82 in bank

   Select 2

   What are two characteristics of a null zone? (Choose two.)

   • AThe null zone is configured by the super user.
   • BBy default, all unassigned interfaces are placed in the null zone.
   • CAll ingress and egress traffic on an interface in a null zone is permitted.
   • DWhen an interface is deleted from a zone, it is assigned back to the null zone.

   Show answer

   Answer: BD

   Next question

7. Question 47 · 82 in bank

   Select 2

   Which two statements are correct about screens? (Choose two.)

   • AScreens process inbound packets.
   • BScreens are processed on the routing engine.
   • CScreens process outbound packets.
   • DScreens are processed on the flow module.

   Show answer

   Answer: AD

   Next question

8. Question 48 · 82 in bank

   Which statement about NAT is correct?

   • ADestination NAT takes precedence over static NAT.
   • BSource NAT is processed before security policy lookup.
   • CStatic NAT is processed after forwarding lookup.
   • DStatic NAT takes precedence over destination NAT.

   Show answer

   Answer: D

   Next question

9. Question 49 · 82 in bank

   Which statement is correct about global security policies on SRX Series devices?

   • AThe to-zone any command configures a global policy.
   • BThe from-zone any command configures a global policy.
   • CGlobal policies are always evaluated first.
   • DGlobal policies can include zone context.

   Show answer

   Answer: D

   Next question

10. Question 50 · 82 in bank

    What information does the show chassis routing-engine command provide?

    • Achassis serial number
    • Bresource utilization
    • Csystem version
    • Drouting tables

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-231 practice, question 41. 82 questions available.