JN0-232 practice questions 11–15

1. Question 11 · 15 in bank

   When does screening occur on an SRX Series Firewall for an ingress traffic flow?

   • Aafter NAT policy processing
   • Bafter route lookup
   • Cafter security policy processing
   • Dafter session lookup

   Show answer

   Answer: B

   Next question

2. Question 12 · 15 in bank

   Which statement is correct about capturing transit packets on an SRX Series Firewall?

   • AYou can capture transit packets on the egress interface using a firewall filter.
   • BYou can capture transit packets by using a firewall filter on the loopback interlace.
   • CYou can capture transit packets by using the tcpdump utility in the shell.
   • DYou can capture transit packets using sampling and port mirroring.

   Show answer

   Answer: C

   Next question

3. Question 13 · 15 in bank

   You are asked to create a security policy that controls traffic allowed to pass between the Internet and private security zones. You must ensure that this policy is evaluated before all other policy types on your SRX Series device. In this scenario, which type of security policy should you create?

   • Arouting policy
   • Bdefault policy
   • Cglobal policy
   • Dzone policy

   Show answer

   Answer: C

   Next question

4. Question 14 · 15 in bank

   What is the purpose of assigning logical interfaces to separate security zones in Junos OS?

   • Ato simplify the configuration of network interfaces
   • Bto control traffic that traverses different VLANs using security policies
   • Cto manage routing protocols and updates
   • Dto enable network monitoring through SNMP

   Show answer

   Answer: B

   Next question

5. Question 15 · 15 in bank

   Select 2

   Which two statements about SRX Series zones are correct? (Choose two.)

   • AThe Junos-host zone allows the use of security policies to control access to the SRX Series Firewall.
   • BThe null zone allows the use of security policies to log dropped control plane traffic.
   • CThe functional zone is used to define the management interface on smaller SRX Series Firewalls.
   • DA security zone processes intra-zone traffic without a security policy.

   Show answer

   Answer: AD

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

JN0-232 practice, question 11. 15 questions available.