JN0-232 practice questions 1–10

1. Question 1 · 15 in bank

   You are modifying the NAT rule order and you notice that a new NAT rule has been added to the bottom of the list. In this situation, which command would you use to reorder NAT rules?

   • Ainsert
   • Brun
   • Ctop
   • Dup

   Show answer

   Answer: A

   Next question

2. Question 2 · 15 in bank

   Select 2

   Which two settings does the host-inbound-traffic zone configuration parameter control? (Choose two.)

   • Atransit traffic
   • Bprotocols on the zone's physical interfaces
   • Cexception traffic
   • Dprotocols on the zone's logical interfaces

   Show answer

   Answer: BD

   Next question

3. Question 3 · 15 in bank

   Select 2

   Which two statements are correct about enabling the Avira Antivirus engine on an SRX Series Firewall? (Choose two.)

   • AA license is required.
   • BA license is not required.
   • CA reboot is required.
   • DA reboot is not required.

   Show answer

   Answer: AD

   Next question

4. Question 4 · 15 in bank

   Select 2

   Which two products will allow security policy management on SRX Series devices? (Choose two.)

   • AJuniper Mist
   • BSecurity Director
   • CJIMS
   • DJSA

   Show answer

   Answer: BC

   Next question

5. Question 5 · 15 in bank

   Select 2

   Which two security policies are installed by default on SRX 300 Series Firewalls? (Choose two.)

   • Aa security policy to allow all traffic from the trust zone to the trust zone
   • Ba security policy to allow all traffic from the trust zone to the untrust zone
   • Ca security policy to allow all traffic from the untrust zone to the trust zone
   • Da security policy to allow all traffic from the management zone to the trust zone

   Show answer

   Answer: AC

   Next question

6. Question 6 · 15 in bank

   Select 2

   You want to enable NextGen Web Filtering in SRX Series devices. In this scenario, which two actions will accomplish this task? (Choose two.)

   • AGenerate a CA-signed certificate.
   • BGenerate a self-signed certificate.
   • CConfigure an SSL initiation profile.
   • DConfigure an SSL proxy profile.

   Show answer

   Answer: BD

   Next question

7. Question 7 · 15 in bank

   Select 2

   What are two valid security address objects within Juniper Networks? (Choose two.)

   • Aglobal address object
   • Bprefix address object
   • Crouting address object
   • DMAC address object

   Show answer

   Answer: AB

   Next question

8. Question 8 · 15 in bank

   Select 2

   Which two statements about management functional zones are correct? (Choose two.)

   • AThe management functional zone contains all available revenue ports until they are assigned to a user-defined security zone.
   • BThe management functional zone cannot be referenced in any security policies.
   • CThe management functional zone is automatically created on the SRX Series Firewalls.
   • DThe management functional zone is used to control the management-related traffic that is allowed to access your device.

   Show answer

   Answer: CD

   Next question

9. Question 9 · 15 in bank

   Select 2

   

   Referring to the exhibit, which two statements are correct? (Choose two.)

   • AThe SRX Series Firewall is performing destination NAT.
   • BThe SRX Series Firewall is performing source NAT.
   • CThe SRX Series Firewall is not performing PAT.
   • DThe SRX Series Firewall is performing PAT.

   Show answer

   Answer: AD

   Next question

10. Question 10 · 15 in bank

    Select 2

    Which two statements are true about content filtering on SRX Series devices? (Choose two.)

    • AContent filtering requires a license.
    • BContent filtering examines the file extension to determine the file type.
    • CContent filtering does not require a license.
    • DContent filtering examines the file contents to determine the file type.

    Show answer

    Answer: CD

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-232 practice, question 1. 15 questions available.