JN0-231 is a new exam for the Juniper Networks Certified Associate, Security (JNCIA-SEC) certification.Passcert new released Security, Associate (JNCIA-SEC) JN0-231 Dumps that you will get all the required Juniper JN0-231 exam objectives to ease your preparation. With the help of Security, Associate (JNCIA-SEC) JN0-231 Dumps provided by us, you can pass Juniper JN0-231 exam on your first shot. Make sure to use all the questions provided to you so you can improve your preparation level and achieve success. It is highly recommended to go through all of our Security, Associate (JNCIA-SEC) JN0-231 Dumps so you can achieve the best results and clear the JNCIA-SEC Certification JN0-231 exam on the first attempt.

The Security track enables you to demonstrate a thorough understanding of security technology in general and Junos OS software for SRX Series devices. JNCIA-SEC, the associate-level certification in this track, is designed for networking professionals with beginner-intermediate knowledge of the Juniper Networks Junos OS for SRX Series devices. The written exam verifies your understanding of security technologies and related platform configuration and troubleshooting skills.

Exam Code：JN0-231

Exam Length: 90 minutes

Exam Type: 65 multiple-choice questions

Software Versions: Junos OS 21.2

Delivered by: Pearson VUE

Prerequisite Certification: None

SRX Series Devices

Junos Security Objects

Security policies

Juniper Advanced Threat Protection

Network Address Translation

IPsec

Unified Threat Management

Monitoring/Reporting and Troubleshooting

1. If you need to protect against malicious files that might be download through Web-based e-mail, which Sky ATP protection mechanism should you use?

A.SMTP file inspection

B.IMAP file inspection

C.POP3 file inspection

D.HTTP file inspection

Answer: D

 

2. Which of the following are supported Mini-Physical Interface Modules (Mini-PIMs) on an SRX Series Services Gateways? (Choose three.)

A.DOCSIS

B.8-Port Gigabit Ethernet SFP XPIM

C.1-Port Gigabit Ethernet PoE

D.Serial

E.1-Port Gigabit Ethernet Small Form-Factor Pluggable (SFP)

Answer: ADE

3. The vSRX is available for which two of the following hypervisors? (Choose two.)

A.Hyper-V

B.Xen

C.OpenVZ

D.KVM

Answer: AD

4. You are configuring an SRX Series device to inter-operate with a third-party IPsec VPN endpoint that uses policies to create the VPN.

In this scenario, what must be configured for the VPN to work?

A.perfect forward secrecy

B.VPN monitoring

C.re-keying

D.proxy IDs

Answer: D

 

5. What match criteria does an SRX Series device’s network processing unit (NPU) use to determine if a flow already exists for a packet? (Choose three.)

A.MAC address

B.inbound interface

C.source port

D.unique session token number for a given zone and virtual router

E.protocol

Answer: CDE

 

6. After a packet is not able to be matched to an existing session, what is the next service to inspect the packet?

A.screens

B.zones

C.policy

D.static NAT

Answer: A

 

7. When traffic has met match criteria, what options are available to be performed on the traffic? (Choose three.)

A.permit

B.reject

C.deny

D.discard

E.redirect

Answer: ABC

 

8. In the context of SRX Series devices, what services does fast-path processing skip? (Choose two.)

A.zones

B.screens

C.services ALG

D.policy

Answer: AD

 

9. When does a Junos security device implement NAT?

A.first path processing only

B.fast path processing only

C.both first path and fast path processing

D.neither first path nor fast path processing

Answer: C

 

10. Which order do Junos security devices examine policies for transit traffic?

A.default policy, zone policies, global policies

B.zone policies, global policies, default policy

C.global policies, zone policies, default policy

D.default policy, global policies, zone policies

Answer: B