Free Practice Questions for Juniper JN0-231 Exam

Which order is correct for Junos security devices that examine policies for transit traffic?

• zone policies global policies default policies
• default policies zone policies global policies
• default policies global policies zone policies
• global policies zone policies default policies

You must monitor security policies on SRX Series devices dispersed throughout locations in your organization using a 'single pane of glass' cloud-based solution. Which solution satisfies the requirement?

• Juniper Sky Enterprise
• J-Web
• Junos Secure Connect
• Junos Space

Which two statements are correct about the integrated user firewall feature?(Choose two.)

• It maps IP addresses to individual users.
• It supports IPv4 addresses.
• It allows tracking of non-Windows Active Directory users.
• It uses the LDAP protocol.

You want to prevent other users from modifying or discarding your changes while you are also editing the configuration file. In this scenario, which command would accomplish this task?

• configure master
• cli privileged
• configure exclusive
• configure

When are Unified Threat Management services performed in a packet flow?

• before security policies are evaluated
• as the packet enters an SRX Series device
• only during the first path process
• after network address translation

Which statement about service objects is correct?

• All applications are predefined by Junos.
• All applications are custom defined by the administrator.
• All applications are either custom or Junos defined.
• All applications in service objects are not available on the vSRX Series device.

Which statement is correct about static NAT?

• Static NAT supports port translation.
• Static NAT rules are evaluated after source NAT rules.
• Static NAT implements unidirectional one-to-one mappings.
• Static NAT implements unidirectional one-to-many mappings.

Your ISP gives you an IP address of 203.0.113.0/27 and informs you that your default gateway is 203.0.113.1. You configure destination NAT to your internal server, but the requests sent to the webserver at 203.0.113.5 are not arriving at the server. In this scenario, which two configuration features need to be added? (Choose two.)

• firewall filter
• security policy
• proxy-ARP
• UTM policy

Which security policy type will be evaluated first?

• A zone policy with no dynamic application set
• A global with no dynamic application set
• A zone policy with a dynamic application set
• A global policy with a dynamic application set

What are two Juniper ATP Cloud feed analysis components? (Choose two.)

• IDP signature feed
• C&C cloud feed
• infected host cloud feed
• US CERT threat feed