Download Security, Associate.CertDumps.JN0-231.2023-11-01.1e.115q.vcex

File Info

Exam	Security, Associate
Number	JN0-231
File Name	Security, Associate.CertDumps.JN0-231.2023-11-01.1e.115q.vcex
Size	1.02 Mb
Posted	November 01, 2023
Downloads	6

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAM_HUB

Discount: 20%

Demo Questions

Question 1

Which of these about security zones is true?

A: Logical interfaces can only be added to user-defined security zones
B: A security zone must contain at least one interface
C: An interface can belong to multiple security zones
D: A security zone can only contain one interface

Correct Answer: A

A security zone can contain multiple interfaces.
A security zone may contain no interfaces.
An interface can only belong to one security zone.
Logical interfaces cannot be added to system-defined security zones, they must be added to userdefined security zones.
Further reading -
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-zone-configuration.html

Question 2

SSH service has been correctly configured on an SRX device. However, administrators are unable to connect using SSH on the revenue ports.
Which of these can be configured to solve this problem?

A: Allow SSH traffic as host inbound traffic on the incoming security zone
B: Configure an IDP policy to allow SSH traffic
C: Configure a global policy to allow SSH traffic
D: Configure a security policy to allow SSH traffic

Correct Answer: A

Host inbound traffic controls traffic that is destined for the Junos device itself. SSH traffic terminates on the device itself and must be allowed as host inbound traffic.
Further reading -
https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/security-edit-host-inbound-traffic.html

Question 3

Which command can be used to view the mode (flow or packet-based) in which the SRX device is operating?

A: user@SRX> show security flow session
B: user@SRX> show security flow forwarding-mode
C: user@SRX> show security flow status
D: user@SRX> show security flow forwarding-status

Correct Answer: C

user@root> show security flow status
Flow forwarding mode:
Inet forwarding mode: flow based
Inet6 forwarding mode: drop
MPLS forwarding mode: drop
ISO forwarding mode: drop
Advanced services data-plane memory mode: Default
Flow trace status
Flow tracing status: off
Flow session distribution
Distribution mode: RR-based
Flow ipsec performance acceleration: off
Flow packet ordering
Ordering mode: Hardware
Further reading - https://kb.juniper.net/InfoCenter/index?page=content&id=KB30461

Question 4

Which of these are pre-defined login classes available on an SRX device? (Choose two)

A: Super-user
B: Root
C: JTAC
D: Administrator
E: Operator

Correct Answer: AE

The predefined login classes found on an SRX device are:
operator
read-only
superuser or super-user
unauthorized
Further reading
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/junos-os-login-class.html

Question 5

An interface can have an IPv4 and an IPv6 address at the same time.
True or False.

A: False
B: True

Correct Answer: B

An interface can be configured with an IPv4 address, IPv6 address, or both.
Further reading -
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-zone-configuration.html

Question 6

Which of these is true about STATELESS firewalls on an SRX device?

A: Packets are analyzed as part of a session
B: Packets are analyzed using firewall filters
C: Packets are analyzed using security policies
D: Packets are analyzed using source zone information

Correct Answer: B

Firewall filters are stateless in nature and can be used to regulate incoming traffic on a packet-by-packet basis.
Further reading -
https://www.juniper.net/documentation/en_US/junos/topics/concept/firewall-filter-stateless-overview.html

Question 7

When configured in packet mode, which of these features are NOT available on an SRX device? (Choose three)

A: Unified Threat Management
B: Firewall Filters
C: Network Address Translation
D: Security Policies

Correct Answer: ACD

An SRX device can operate in two different modes: packet mode and flow mode. In flow mode, SRX processes all traffic by analyzing the state or session of traffic. This is also called stateful processing of traffic. In packet mode, SRX processes the traffic as a traditional router on a per-packet basis. This is also known as stateless processing of traffic. Security features like IPsec, NAT, UTM, and so on, do not work in packet mode. By default, Junos OS on SRX devices works in flow mode.
Also, firewall filters work on a per-packet basis.
Further reading - https://kb.juniper.net/InfoCenter/index?page=content&id=KB30461

Question 8

Which type of security is provided by firewall filters?

A: Content filtering
B: Encrypted
C: Stateless
D: Stateful

Correct Answer: C

To influence which packets are allowed to transit the system and to apply special actions to packets as necessary, you can configure stateless firewall filters.
A stateless firewall filter enables you to manipulate any packet of a particular protocol family, including fragmented packets, based on the evaluation of Layer 3 and Layer 4 header fields.
Further reading -
https://www.juniper.net/documentation/en_US/junos/topics/concept/firewall-filter-overview.html

Question 9

Which of these statements are true? (Choose two)