New Year Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: Board70

Associate JNCIA-SEC Changed JN0-231 Questions

Page: 7 / 7
Question 28

Click the Exhibit button.

Which two statements are correct about the partial policies shown in the exhibit? (Choose two.)

Options:

A.

UDP traffic matched by the deny-all policy will be silently dropped.

B.

TCP traffic matched by the reject-all policy will have a TCP RST sent.

C.

TCP traffic matched from the zone trust is allowed by the permit-all policy.

D.

UDP traffic matched by the reject-all policy will be silently dropped.

Question 29

Which two statements are correct about the null zone on an SRX Series device? (Choose two.)

Options:

A.

The null zone is created by default.

B.

The null zone is a functional security zone.

C.

Traffic sent or received by an interface in the null zone is discarded.

D.

You must enable the null zone before you can place interfaces into it.

Question 30

You have multiple branch locations using an SRX Series device. You want a cloud-based solution to configure and monitor this device.

this scenario, which solution would you use?

Options:

A.

J-Web

B.

Juniper Sky Enterprise

C.

Junos Space Security Director

D.

Juniper Secure Analytics

Question 31

You are investigating a communication problem between two hosts and have opened a session on the SRX Series device closest to one of the hosts and entered the show security flow session command.

What information will this command provide? (Choose two.)

Options:

A.

The total active time of the session.

B.

The end-to-end data path that the packets are taking.

C.

The IP address of the host that initiates the session.

D.

The security policy name that is controlling the session.

Page: 7 / 7
Exam Code: JN0-231
Exam Name: Security-Associate (JNCIA-SEC)
Last Update: Dec 22, 2024
Questions: 105
JN0-231 pdf

JN0-231 PDF

$25.5  $84.99
JN0-231 Engine

JN0-231 Testing Engine

$28.5  $94.99
JN0-231 PDF + Engine

JN0-231 PDF + Testing Engine

$40.5  $134.99