[2024年04月]更新のJN0-231試験問題集合格させるのは2024年最新のSecurity, Associate (JNCIA-SEC)
無料で使えるJN0-231試験問題集で合格させるお手軽に試験合格
質問 # 52
Referring to the exhibit.
Which type of NAT is being performed?
- A. Destination NAT without PAT
- B. Source NAT without PAT
- C. Source NAT with PAT
- D. Destination NAT with PAT
正解：C
質問 # 53
Which type of security policy protect restricted services from running on non-standard ports?
- A. Application firewall
- B. IDP
- C. Sky ATP
- D. antivirus
正解：B
質問 # 54
Screens on an SRX Series device protect against which two types of threats? (Choose two.)
- A. IP spoofing
- B. zero-day outbreaks
- C. ICMP flooding
- D. malicious e-mail attachments
正解：A、C
質問 # 55
Referring to the exhibit.
Users should not have access to Facebook, however, a recent examination of the logs security show that users are accessing Facebook.
what should you do to solve this problem?
- A. Change the Internet-Access rule from a zone policy to a global policy
- B. Change the source address for the Block-Facebook-Access rule to the prefix of the users
- C. Move the Block-Facebook-Access rule from a zone policy to a global policy
- D. Move the Block-Facebook-Access rule before the Internet-Access rule
正解：D
質問 # 56
Which statement is correct about global security policies on SRX Series devices?
- A. The from-zone any command configures a global policy.
- B. The to-zone any command configures a global policy.
- C. Global policies can include zone context.
- D. Global policies are always evaluated first.
正解：C
質問 # 57
You want to automatically generate the encryption and authentication keys during IPsec VPN establishment.
What would be used to accomplish this task?
- A. IPsec
- B. Diffie_Hellman
- C. Main mode
- D. Aggregate mode
正解：B
質問 # 58
The free licensing model for Sky ATP includes which features? (Choose two.)
- A. Executable file inspection
- B. Compromised endpoint dashboard
- C. Infected host blocking
- D. C & C feeds
正解：A、C
質問 # 59
Which security feature is applied to traffic on an SRX Series device when the device is running n packet mode?
- A. Firewall filters
- B. ALGs
- C. Unified policies
- D. Sky ATP
正解：A
質問 # 60
What are three Junos UTM features? (Choose three.)
- A. antivirus
- B. IDP/IPS
- C. Web filtering
- D. content filtering
- E. screens
正解：A、C、D
質問 # 61
You are asked to configure your SRX Series device to block all traffic from certain countries. The solution must be automatically updated as IP prefixes become allocated to those certain countries.
Which Juniper ATP solution will accomplish this task?
- A. IDP
- B. unified security policies
- C. C&C feed
- D. Geo IP
正解：D
解説：
Juniper ATP Geo IP can help to accomplish this task by using geolocation services to determine the geographical location of IP addresses. As IP prefixes get allocated to the countries that you have specified, the Geo IP solution will automatically update the configured firewall policies to block any traffic that is coming from those specific countries.
This is a great solution for blocking specific countries - as it will allow for a more personalized and targeted approach to firewall policies - and thus, to increase the effectiveness of the solution at blocking potential malicious traffic.
質問 # 62
You are configuring an SRX Series device. You have a set of servers inside your private network that need one-to-one mappings to public IP addresses.
Which NAT configuration is appropriate in this scenario?
- A. destination NAT
- B. source NAT with PAT
- C. NAT-T
- D. static NAT
正解：D
質問 # 63
Referring to the exhibit.
Which type of NAT is being performed?
- A. Destination NAT without PAT
- B. Source NAT without PAT
- C. Source NAT with PAT
- D. Destination NAT with PAT
正解：C
質問 # 64
Which two statements about security policy processing on SRX series devices are true? (choose two)
- A. Traffic matching a global policy cannot be processed against a firewall filter
- B. Zone-Based security policies are processed before global policies.
- C. Traffic matching a zone-based policy is not processed against global polices.
- D. Zone-Based security policies are processed after global policies
正解：B、D
質問 # 65
Which two statements are correct about global security policies? (choose two)
- A. Global based policies must reference the source and destination zones
- B. Global based policies can reference the source zone
- C. Global based policies can reference the destination zone
- D. Global based policies must reference a dynamic application
正解：B、C
質問 # 66
Click the Exhibit button.
Referring to the exhibit, which two statements are correct about the ping command? (Choose two.)
- A. The DMZ routing-instance is the destination.
- B. The DMZ routing-instance is the source.
- C. The 10.10.102.10 IP address is the destination.
- D. The 10.10.102.10 IP address is the source.
正解：B、C
質問 # 67
A security zone is configured with the source IP address 192.168.0.12/255.255.0.255 wildcard match.
In this scenario, which two IP packets will match the criteria? (Choose two.)
- A. 192.168.0.1
- B. 192.168.1.12
- C. 192.168.22.12
- D. 192.168.1.21
正解：B、C
質問 # 68
You want to implement user-based enforcement of security policies without the requirement of certificates and supplicant software.
Which security feature should you implement in this scenario?
- A. integrated user firewall
- B. screens
- C. 802.1X
- D. Juniper ATP
正解：D
解説：
In this scenario, you should implement Juniper ATP (Advanced Threat Prevention). Juniper ATP provides user-based enforcement of security policies without the requirement of certificates and supplicant software. It uses a combination of behavioral analytics, sandboxing, and threat intelligence to detect and respond to advanced threats in real time. Juniper ATP provides robust protection against targeted attacks, malicious insiders, and zero-day malware. For more information, please refer to the Juniper ATP product page on Juniper's website.
質問 # 69
Which UTM feature should you use to protect users from visiting certain blacklisted websites?
- A. antispam
- B. Web filtering
- C. Content filtering
- D. Antivirus
正解：B
質問 # 70
Which method do VPNs use to prevent outside parties from viewing packet in clear text?
- A. Encryption
- B. Integrity
- C. Authentication
- D. NAT_T
正解：A
質問 # 71
What does the number "2" indicate in interface ge-0/1/2?
- A. the physical interface card (PIC)
- B. the interface logical number
- C. the flexible PIC concentrator (FPC)
- D. the port number
正解：D
質問 # 72
......
JN0-231試験問題集、JN0-231練習テスト問題：https://jp.fast2test.com/JN0-231-premium-file.html
無料JN0-231学習ガイド試験問題と解答：https://drive.google.com/open?id=1asCq9g4-9KHBBg3PtqnV--Y9gmUfEddk