JN0-231 Free Practice Test

Which statement about NAT is correct?

1. A. Destination NAT takes precedence over static NAT.
2. B. Source NAT is processed before security policy lookup.
3. C. Static NAT is processed after forwarding lookup.
4. D. Static NAT takes precedence over destination NAT.

Correct Answer: D

Which two statements are correct about IKE security associations? (Choose two.)

1. A. IKE security associations are established during IKE Phase 1 negotiations.
2. B. IKE security associations are unidirectional.
3. C. IKE security associations are established during IKE Phase 2 negotiations.
4. D. IKE security associations are bidirectional.

Correct Answer: AD

Which order is correct for Junos security devices that examine policies for transit traffic?

1. A. zone policies global policies default policies
2. B. default policies zone policies global policies
3. C. default policies global policies zone policies
4. D. global policies zone policies default policies

Correct Answer: A

Which two criteria should a zone-based security policy include? (Choose two.)

1. A. a source port
2. B. a destination port
3. C. zone context
4. D. an action

Correct Answer: AB
A security policy is a set of statements that controls traffic from a specified source to a specified destination using a specified service. A policy permits, denies, or tunnels specified types of traffic unidirectionally between two points.
Each policy consists of:
A unique name for the policy.
A from-zone and a to-zone, for example: user@host# set security policies from-zone untrust to-zone untrust A set of match criteria defining the conditions that must be satisfied to apply the policy rule. The match criteria are based on a source IP address, destination IP address, and applications. The user identity firewall provides greater granularity by including an additional tuple, source-identity, as part of the policy statement.
A set of actions to be performed in case of a match—permit, deny, or reject. Accounting and auditing elements—counting, logging, or structured system logging.
https://www.juniper.net/documentation/us/en/software/junos/security-policies/topics/topic-map/security-policy-c

What are two features of the Juniper ATP Cloud service? (Choose two.)

1. A. sandbox
2. B. malware detection
3. C. EX Series device integration
4. D. honeypot

Correct Answer: AB