Juniper JN0-230 - Security, Associate (JNCIA-SEC) Exam
Page: 3 / 13
Total 65 questions
Question #11 (Topic: Topic 1)
Which source NAT rule set would be used when a packet matches the conditions in multiple rule sets?
A. The most specific rule set will be used.
B. The least specific rule set will be used.
C. The first rule set matched will be used.
D. The last rule set matched will be used.
Answer: C
Question #12 (Topic: Topic 1)
Which statement is correct about SKY ATP?
A. SKY ATP can provide live threat feeds to SRX Series devices.
B. SKY ATP relies on the SRX Series device to open and analyze suspect file attachments.
C. The local Sky ATP platform downloads the latest threat feeds from a managed file.
D. Sky ATP is a local hardware-based security threat analyzer that performs multiple tasks.
Answer: A
Question #13 (Topic: Topic 1)
Which two statements are true about Junos Space Security Director? (Choose two.)
A. Security Director supports creation and maintenance of metadata-based policies.
B. Security Director can deploy enforcement policies automatically to firewalls and switches.
C. Security Director can perform deep-packet analysis.
D. Security Director is preinstalled on SRX Series devices.
Answer: AB
Question #14 (Topic: Topic 1)
Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)
A. With global-based policies, you do not need to specify a source address in the match criteria.
B. With global-based policies, you do not need to specify a destination zone in the match criteria.
C. With global-based policies, you do not need to specify a destination address in the match criteria.
D. With global-based policies, you do not need to specify a source zone in the match criteria.
Answer: BD
Question #15 (Topic: Topic 1)
You want to configure your SRX Series device so that employees configured with IP addresses on the 172.16.0.0/16 subnet can access the Internet. The device
has been allocated a single public IP address.
In this scenario, which NAT mode should you enable?
has been allocated a single public IP address.
In this scenario, which NAT mode should you enable?
A. static NAT
B. destination NAT
C. source NAT
D. NAT-T
Answer: C
