JN0-231 practice questions 61–70

1. Question 61 · 82 in bank

   What are two Juniper ATP Cloud feed analysis components? (Choose two.)

   • AIDP signature feed
   • BC&C cloud feed
   • Cinfected host cloud feed
   • DUS CERT threat feed

   Show answer

   Answer: C

   Next question

2. Question 62 · 82 in bank

   Select 2

   Which two statements are correct about global policies? (Choose two.)

   • AGlobal policies are evaluated after default policies.
   • BGlobal policies do not have to reference zone context.
   • CGlobal policies are evaluated before default policies.
   • DGlobal policies must reference zone contexts.

   Show answer

   Answer: BC

   Next question

3. Question 63 · 82 in bank

   You want to verify the peer before IPsec tunnel establishment. What would be used as a final check in this scenario?

   • Atraffic selector
   • Bperfect forward secrecy
   • Cst0 interfaces
   • Dproxy ID

   Show answer

   Answer: C

   Next question

4. Question 64 · 82 in bank

   What is the default value of the dead peer detection (DPD) interval for an IPsec VPN tunnel?

   • A20 seconds
   • B5 seconds
   • C10 seconds
   • D40 seconds

   Show answer

   Answer: C

   Next question

5. Question 65 · 82 in bank

   Select 2

   What are two functions of Juniper ATP Cloud? (Choose two.)

   • Amalware inspection
   • BWeb content filtering
   • CDDoS protection
   • DGeo IP feeds

   Show answer

   Answer: AD

   Next question

6. Question 66 · 82 in bank

   Select 3

   Which three operating systems are supported for installing and running Juniper Secure Connect client software? (Choose three.)

   • AWindows 7
   • BAndroid
   • CWindows 10
   • DLinux
   • EmacOS

   Show answer

   Answer: BCE

   Next question

7. Question 67 · 82 in bank

   You want to implement user-based enforcement of security policies without the requirement of certificates and supplicant software. Which security feature should you implement in this scenario?

   • Aintegrated user firewall
   • Bscreens
   • C802.1X
   • DJuniper ATP

   Show answer

   Answer: A

   Next question

8. Question 68 · 82 in bank

   Which statement is correct about static NAT?

   • AStatic NAT supports port translation.
   • BStatic NAT rules are evaluated after source NAT rules.
   • CStatic NAT implements unidirectional one-to-one mappings.
   • DStatic NAT implements unidirectional one-to-many mappings.

   Show answer

   Answer: C

   Next question

9. Question 69 · 82 in bank

   In J-Web, the management and loopback address configuration option allows you to configure which area?

   • Athe IP address of the primary Gigabit Ethernet port
   • Bthe IP address of the Network Time Protocol server
   • Cthe CIDR address
   • Dthe IP address of the device management port

   Show answer

   Answer: C

   Next question

10. Question 70 · 82 in bank

    Select 2

    Which two statements are correct about IPsec security associations? (Choose two.)

    • AIPsec security associations are bidirectional.
    • BIPsec security associations are unidirectional.
    • CIPsec security associations are established during IKE Phase 1 negotiations.
    • DIPsec security associations are established during IKE Phase 2 negotiations.

    Show answer

    Answer: BD

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-231 practice, question 61. 82 questions available.