JN0-231 Certification – Valid Exam Dumps Questions Study Guide! (Updated 82 Questions) [Q32-Q53]

QUESTION 32
Which statements about NAT are correct? (Choose two.)

QUESTION 33
Users in your network are downloading files with file extensions that you consider to be unsafe for your network. You must prevent files with specific file extensions from entering your network.
Which UTM feature should be enable on an SRX Series device to accomplish this task?

QUESTION 34
A new SRX Series device has been delivered to your location. The device has the factory-default configuration loaded. You have powered on the device and connected to the console port.
What would you use to log into the device to begin the initial configuration?

QUESTION 35
Which two statements about security policy processing on SRX series devices are true? (choose two)

QUESTION 36
You are configuring an IPsec VPN tunnel between two location on your network. Each packet must be encrypted and authenticated.
Which protocol would satisfy these requirements?

QUESTION 37
Which two statements are correct about using global-based policies over zone-based policies? (Choose two.)

QUESTION 38
Which method do VPNs use to prevent outside parties from viewing packet in clear text?

QUESTION 39
What does IPsec use to negotiate encryption algorithms?

QUESTION 40
Referring to the exhibit.

Host-inbound-traffic is configured on the DMZ zone and the ge-0/0/9.0 interface attached to that zone.
Which to types of management traffic would be performed on the SRX Series device? (Choose two.)

QUESTION 41
You want to integrate an SRX Series device with SKY ATP.
What is the first action to accomplish task?

QUESTION 42
The Sky ATP premium or basic-Threat Feed license is needed fort which two features? (Choose two.)

QUESTION 43
Which actions would be applied for the pre-ID default policy unified policies?

QUESTION 44
Which zone is considered a functional zone?

QUESTION 45
You are designing a new security policy on an SRX Series device. You must block an application and log all occurrence of the application access attempts.
In this scenario, which two actions must be enabled in the security policy? (Choose two.)

QUESTION 46
Which security feature is applied to traffic on an SRX Series device when the device is running n packet mode?

QUESTION 47
You want to generate reports from the l-Web on an SRX Series device.
Which logging mode would you use in this scenario?

QUESTION 48
What are two characteristic of static NAT SRX Series devices? (Choose two.)

QUESTION 49
You want to automatically generate the encryption and authentication keys during IPsec VPN establishment.
What would be used to accomplish this task?

QUESTION 50
You are concerned that unauthorized traffic is using non-standardized ports on your network.
In this scenario, which type of security feature should you implement?

QUESTION 51
What is a characteristic of the Junos enhanced Web filtering solution?

QUESTION 52
What is the definition of zone on an SRX series devices?

QUESTION 53
Which type of NAT is performed by the SRX Series device?