Question 1

What are two characteristics of a null zone? (Choose two.)

Accepted Answer

Correct answer: BD

Question 2

What is the correct order in which interface names should be identified?

Accepted Answer

Correct answer: C

Question 3

Click the Exhibit button.
What is the purpose of the host-inbound-traffic configuration shown in the exhibit?

Accepted Answer

Correct answer: C

Question 4

Click the Exhibit button.

From SurePassExam
https://www.surepassexam.com/JN0-231-exam-dumps.html (101 New Questions)
You are asked to allow only ping and SSH access to the security policies shown in the exhibit. Which statement will accomplish this task?

Accepted Answer

Correct answer: B

Question 5

You want to implement user-based enforcement of security policies without the requirement of certificates and supplicant software.
Which security feature should you implement in this scenario?

Accepted Answer

In this scenario, you should implement Juniper ATP (Advanced Threat Prevention). Juniper ATP provides user-based enforcement of security policies without the
requirement of certificates and supplicant software. It uses a combination of behavioral analytics, sandboxing, and threat intelligence to detect and respond to
advanced threats in real time. Juniper ATP provides robust protection against targeted attacks, malicious insiders, and zero-day malware. For more information,
please refer to the Juniper ATP product page on Juniper's website.

Question 6

Which statement is correct about static NAT?

Accepted Answer

Static NAT (Network Address Translation) is a type of NAT that maps a public IP address to a private IP address. With static NAT, a one-to-one mapping is
created between a public IP address and a private IP address. This means that a single public IP address is mapped to a single private IP address, and all
incoming traffic to the public IP address is forwarded to the private IP address.

Question 7

You are deploying an SRX Series firewall with multiple NAT scenarios. In this situation, which NAT scenario takes priority?

Accepted Answer

This is because the interface NAT would allow the connections to pass through the firewall - and thus, would ensure that the appropriate ports are open in order to
allow for the connections to be established.
This is a really important step in order to ensure that all of the appropriate traffic is allowed through the SRX Series firewall - and thus, it must be a priority when
deploying the firewall.

Question 8

You are installing a new SRX Series device and you are only provided one IP address from your ISP. In this scenario, which NAT solution would you implement?

Accepted Answer

Correct answer: C

Question 9

Which two statements are true about Juniper ATP Cloud? (Choose two.)

Accepted Answer

Juniper ATP Cloud is a cloud-based ATP subscription that delivers advanced threat protection services, such as URL categorization, file reputation analysis, and
malware analysis. It is able to quickly and accurately categorize URLs and other web content, and can also provide detailed reporting on web usage, as well as the
ability to define and enforce acceptable use policies. Additionally, Juniper ATP Cloud is able to block and allow specific IPs, providing additional protection against
malicious content.
References:
https://www.juniper.net/documentation/en_US/junos-space-security-director/topics/task/configuration/security-s
https://www.juniper.net/documentation/en_US/junos-space-security-director/topics/task/configuration/security-s

Question 10

What information does the show chassis routing-engine command provide?

Accepted Answer

Correct answer: B