Based on Official Syllabus Topics of Actual Juniper JN0-231 Exam [Q35-Q50]

Posted byadminApril 23, 2023Leave a Comment on Based on Official Syllabus Topics of Actual Juniper JN0-231 Exam [Q35-Q50]

Rate this post

Based on Official Syllabus Topics of Actual Juniper JN0-231 Exam

Free JN0-231 Dumps are Available for Instant Access

Q35. Which three Web filtering deployment actions are supported by Junos? (Choose three.)

Use IPS.

Use local lists.

Use remote lists.

Use Websense Redirect.

Use Juniper Enhanced Web Filtering.

Q36. Referring to the exhibit.

Which type of NAT is being performed?

Source NAT with PAT

Source NAT without PAT

Destination NAT without PAT

Destination NAT with PAT

Q37. Which two UTM features should be used for tracking productivity and corporate user behavior? (Choose two.)

the content filtering UTM feature

the antivirus UTM feature

the Web filtering UTM feature

the antispam UTM feature

Q38. When configuring antispam, where do you apply any local lists that are configured?

custom objects

advanced security policy

antispam feature-profile

antispam UTM policy

Q39. Which statement is correct about global security policies on SRX Series devices?

The to-zone any command configures a global policy.

The from-zone any command configures a global policy.

Global policies are always evaluated first.

Global policies can include zone context.

Q40. Which actions would be applied for the pre-ID default policy unified policies?

Redirect the session

Reject the session

Log the session

Silently drop the session

Q41. Which two statements about user-defined security zones are correct? (Choose two.)

User-defined security zones do not apply to transit traffic.

Users cannot share security zones between routing instances.

Users can share security zones between routing instances.

Users can configure multiple security zones.

User-defined security zones allow users to configure multiple security zones and share them between routing instances. This allows users to easily manage multiple security zones and their associated policies. For example, a user can create a security zone for corporate traffic, a security zone for guest traffic, and a security zone for public traffic, and then configure policies to control the flow of traffic between each of these security zones. Transit traffic can also be managed using user-defined security zones, as the policies applied to these zones will be applied to the transit traffic as well.

Q42. You are configuring an IPsec VPN tunnel between two location on your network. Each packet must be encrypted and authenticated.
Which protocol would satisfy these requirements?

MD5

ESP

SHA

Q43. You want to deploy, manage, and configure multiple SRX series devices without an on-premises software solution which solution would satisfy this requirement?

Junos Space Network Director

Juniper Sky Enterprise

Juniper Sky ATP

Juniper Advanced Threat Prevention.

Q44. Click the Exhibit button.

What is the purpose of the host-inbound-traffic configuration shown in the exhibit?

to permit host inbound HTTP traffic and deny all other traffic on the internal security zone

to deny and log all host inbound traffic on the internal security zone, except for HTTP traffic

to permit all host inbound traffic on the internal security zone, but deny HTTP traffic

to permit host inbound HTTP traffic on the internal security zone

Q45. What is a characteristic of the Junos enhanced Web filtering solution?

The SRX series device intercepts HTTP and HTTPS request and send the source IP address to the on-premises Websense server

The Websense cloud resolves the categorized URLs to IP addresses by performing a DNS reverse loockup

The Websense cloud categorize the URLs and also provide site reputation information.

Junos Enhanced Web filtering allows the SRX series device to categorize URLs using an onpremises websense server.

Q46. BY default, revenue interface are placed into which system-defined security zone on an SRX series device?

Trust

Null

Junos-trust

untrust

Q47. What is the default timeout value for TCP sessions on an SRX Series device?

30 seconds

60 minutes

60 seconds

30 minutes

By default, TCP has a 30-minute idle timeout, and UDP has a 60-second idle timeout. Additionally, known IP protocols have a 30-minute timeout, whereas unknown ones have a 60-second timeout. Setting the inactivity timeout is very useful, particularly if you are concerned about applications either timing out or remaining idle for too long and filling up the session table. According to the Juniper SRX Series Services Guide, this can be configured using the ‘timeout inactive’ statement for the security policy.

Q48. Click the Exhibit button

You have configured source … Being received By the SRX series Which features must be configured

Port Forwarding

Destination NAT

Proxy ARP

Reverse static NAT

Q49. Users in your network are downloading files with file extensions that you consider to be unsafe for your network. You must prevent files with specific file extensions from entering your network.
Which UTM feature should be enable on an SRX Series device to accomplish this task?

Content filtering

Web filtering

Antispam

URL filtering

Q50. Which Web filtering solution uses a direct Internet-based service for URL categorization?

Juniper ATP Cloud

Websense Redirect

Juniper Enhanced Web Filtering

local blocklist

Juniper Enhanced Web Filtering is a web filtering solution that uses a direct Internet-based service for URL categorization. This service allows Enhanced Web Filtering to quickly and accurately categorize URLs and other web content, providing real-time protection against malicious content. Additionally, Enhanced Web Filtering is able to provide detailed reporting on web usage, as well as the ability to define and enforce acceptable use policies.

Loading …