JN0-231問題集には練習試験問題解答
JN0-231はJNCIA-SEC実際の無料試験練習テスト
質問 # 43
Which two statements about the Junos OS CLI are correct? (Choose two.)
- A. A factory-default login assigns the hostname Amnesiac to the device.
- B. Most Juniper devices identify the root login prompt using the > character.
- C. Most Juniper devices identify the root login prompt using the % character.
- D. The default configuration requires you to log in as the admin user.
正解：B、D
解説：
The two correct statements about the Junos OS CLI are that the default configuration requires you to log in as the admin user, and that most Juniper devices identify the root login prompt using the > character. The factory-default login assigns the hostname "juniper" to the device and the root login prompt is usually identified with the % character. More information about the Junos OS CLI can be found in the Juniper Networks technical documentation here:https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/cli-overview.html.
質問 # 44
You want to provide remote access to an internal development environment for 10 remote developers.
Which two components are required to implement Juniper Secure Connect to satisfy this requirement?
(Choose two.)
- A. Marvis virtual network assistant
- B. Juniper Secure Connect client software
- C. an additional license for an SRX Series device
- D. an SRX Series device with an SPC3 services card
正解：B、C
質問 # 45
Click the Exhibit button.
Referring to the exhibit, which two statements are correct about the ping command? (Choose two.)
- A. The 10.10.102.10 IP address is the source.
- B. The 10.10.102.10 IP address is the destination.
- C. The DMZ routing-instance is the destination.
- D. The DMZ routing-instance is the source.
正解：B、D
質問 # 46
Exhibit.
Which statement is correct regarding the interface configuration shown in the exhibit?
- A. The IP address has an invalid subnet mask.
- B. The interface MTU has been increased.
- C. The interface is assigned to the trust zone by default.
- D. The IP address is assigned to unit 0.
正解：D
質問 # 47
Click the Exhibit button.
Referring to the exhibit, a user is placed in which hierarchy when the exit command is run?
- A. [edit security policies from-zone trust to-zone dmz]
user@vSRX-1# - B. user@vSRX-1>
- C. [edit]
user@vSRX-1# - D. [edit security policies]
user@vSRX-1#
正解：D
質問 # 48
Users in your network are downloading files with file extensions that you consider to be unsafe for your network. You must prevent files with specific file extensions from entering your network.
Which UTM feature should be enable on an SRX Series device to accomplish this task?
- A. URL filtering
- B. Antispam
- C. Web filtering
- D. Content filtering
正解：D
質問 # 49
You are designing a new security policy on an SRX Series device. You must block an application and log all occurrence of the application access attempts.
In this scenario, which two actions must be enabled in the security policy? (Choose two.)
- A. Log the session initiations
- B. Enable a reject action
- C. Enable a deny action
- D. Log the session closures
正解：A、C
質問 # 50
Screens on an SRX Series device protect against which two types of threats? (Choose two.)
- A. IP spoofing
- B. malicious e-mail attachments
- C. ICMP flooding
- D. zero-day outbreaks
正解：A、C
質問 # 51
You want to deploy a NAT solution.
In this scenario, which solution would provide a static translation without PAT?
- A. pool-based NAT with PAT
- B. pool-based NAT with address shifting
- C. interface-based source NAT
- D. pool-based NAT without PAT
正解：D
質問 # 52
You are configuring an IPsec VPN tunnel between two location on your network. Each packet must be encrypted and authenticated.
Which protocol would satisfy these requirements?
- A. ESP
- B. SHA
- C. AH
- D. MD5
正解：A
質問 # 53
Which two IKE Phase 1 configuration options must match on both peers to successfully establish a tunnel? (Choose two.)
- A. Diffie-Hellman group
- B. IKE mode
- C. gateway interfaces
- D. VPN name
正解：A、B
質問 # 54
Which two components are configured for host inbound traffic? (Choose two.)
- A. logical interface
- B. routing instance
- C. zone
- D. physical interface
正解：A、C
質問 # 55
What are the valid actions for a source NAT rule in J-Web? (choose three.)
- A. Source
- B. Pool
- C. On
- D. Off
- E. interface
正解：B、D、E
質問 # 56
You want to generate reports from the l-Web on an SRX Series device.
Which logging mode would you use in this scenario?
- A. Syslog
- B. Event
- C. Stream
- D. local
正解：C
質問 # 57
Which two IKE Phase 1 configuration options must match on both peers to successfully establish a tunnel?
(Choose two.)
- A. Diffie-Hellman group
- B. IKE mode
- C. gateway interfaces
- D. VPN name
正解：A、B
質問 # 58
You have an FTP server and a webserver on the inside of your network that you want to make available to users outside of the network. You are allocated a single public IP address.
In this scenario, which two NAT elements should you configure? (Choose two.)
- A. NAT pool
- B. source NAT
- C. destination NAT
- D. static NAT
正解：A、C
解説：
With single Ip address it is port forwarding. So, destination NAT and a pool address point to the single public IP of the internet facing interface.
質問 # 59
You have configured a Web filtering UTM policy?
Which action must be performed before the Web filtering UTM policy takes effect?
- A. The UTM policy be configured as a routing next hop.
- B. The UTM policy must be linked to an ingress interface.
- C. The UTM policy must be linked to an egress interface
- D. The UTM policy must be linked to a security policy
正解：D
質問 # 60
When are Unified Threat Management services performed in a packet flow?
- A. after network address translation
- B. as the packet enters an SRX Series device
- C. before security policies are evaluated
- D. only during the first path process
正解：A
質問 # 61
Which IPsec protocol is used to encrypt the data payload?
- A. ESP
- B. AH
- C. TCP
- D. IKE
正解：A
質問 # 62
Which statements is correct about Junos security zones?
- A. User-defined security must contain at least one interface.
- B. User-defined security must contains the key word ''zone''
- C. Security policies are referenced within a user-defined security zone.
- D. Logical interface are added to user defined security zones
正解：D
質問 # 63
......
JuniperのJN0-231認定試験は、セキュリティ管理者、ネットワークセキュリティエンジニア、またはセキュリティコンサルタントとして働きたいと希望する個人に最適です。この認定試験は、Juniper Networksのセキュリティ技術やソリューションに関する知識を認定し、競争の激しい求人市場で目立つことができます。さらに、この認定試験は、世界のさまざまな地域での仕事の機会を開くことができるため、グローバルに認められています。
無料JNCIA-SEC JN0-231試験問題：https://jp.fast2test.com/JN0-231-premium-file.html
JN0-231問題集でJNCIA-SEC必ず合格できる練習問題集：https://drive.google.com/open?id=1asCq9g4-9KHBBg3PtqnV--Y9gmUfEddk