JN0-231 practice questions 51–60

1. Question 51 · 82 in bank

   Corporate security requests that you implement a policy to block all POP3 traffic from traversing the Internet firewall. In this scenario, which security feature would you use to satisfy this request?

   • Aantivirus
   • BWeb filtering
   • Ccontent filtering
   • Dantispam

   Show answer

   Answer: C

   Next question

2. Question 52 · 82 in bank

   Which statement is correct about unified security policies on an SRX Series device?

   • AA zone-based policy is always evaluated first.
   • BThe most restrictive policy is applied regardless of the policy level.
   • CA global policy is always evaluated first.
   • DThe first policy rule is applied regardless of the policy level.

   Show answer

   Answer: A

   Next question

3. Question 53 · 82 in bank

   Click the Exhibit button.

   

   You are asked to allow only ping and SSH access to the security policies shown in the exhibit. Which statement will accomplish this task?

   • ARename policy Rule-2 to policy Rule-0.
   • BInsert policy Rule-2 before policy Rule-1.
   • CReplace application any with application [junos-ping junos-ssh] in policy Rule-1.
   • DRename policy Rule-1 to policy Rule-3.

   Show answer

   Answer: B

   Next question

4. Question 54 · 82 in bank

   Which order is correct for Junos security devices that examine policies for transit traffic?

   • A1. zone policies 2. global policies 3. default policies
   • B1. default policies 2. zone policies 3. global policies
   • C1. default policies 2. global policies 3. zone policies
   • D1. global policies 2. zone policies 3. default policies

   Show answer

   Answer: A

   Next question

5. Question 55 · 82 in bank

   What is an IP addressing requirement for an IPsec VPN using main mode?

   • AOne peer must have dynamic IP addressing.
   • BOne peer must have static IP addressing.
   • CBoth peers must have dynamic IP addresses.
   • DBoth peers must have static IP addressing.

   Show answer

   Answer: D

   Next question

6. Question 56 · 82 in bank

   What does the number “2” indicate in interface ge-0/1/2?

   • Athe physical interface card (PIC)
   • Bthe flexible PIC concentrator (FPC)
   • Cthe interface logical number
   • Dthe port number

   Show answer

   Answer: D

   Next question

7. Question 57 · 82 in bank

   Which Juniper ATP feed provides a dynamic list of known botnet servers and known sources of malware downloads?

   • Ainfected host cloud feed
   • BGeo IP feed
   • CC&C cloud feed
   • Dblocklist feed

   Show answer

   Answer: C

   Next question

8. Question 58 · 82 in bank

   Select 2

   Which two IKE Phase 1 configuration options must match on both peers to successfully establish a tunnel? (Choose two.)

   • AVPN name
   • Bgateway interfaces
   • CIKE mode
   • DDiffie-Hellman group

   Show answer

   Answer: CD

   Next question

9. Question 59 · 82 in bank

   Select 2

   A security zone is configured with the source IP address 192.168.0.12/255.255.0.255 wildcard match. In this scenario, which two IP packets will match the criteria? (Choose two.)

   • A192.168.1.21
   • B192.168.0.1
   • C192.168.1.12
   • D192.168.22.12

   Show answer

   Answer: CD

   Next question

10. Question 60 · 82 in bank

    You want to block executable files (*.exe) from being downloaded onto your network. Which UTM feature would you use in this scenario?

    • AIPS
    • BWeb filtering
    • Ccontent filtering
    • Dantivirus

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-231 practice, question 51. 82 questions available.