Braindump2go Guarantee All Exams 100% Pass

One Time!
 Vendor: Juniper

 Exam Code: JN0-230

 Exam Name: Security, Associate (JNCIA-SEC)

 New Updated Questions from Braindump2go (Updated in April/2020)

Visit Braindump2go and Download Full Version JN0-230 Exam Dumps

QUESTION 12
Referring to the exhibit, Host-inbound-traffic is configured on the DMZ zone and the ge-0/0/9.0 interface attached to
that zone.

Which to types of management traffic would be performed on the SRX Series device? (Choose two.)

A. HTTPS
B. SSH
C. Finger
D. HTTP

Answer: BD

QUESTION 13
What is the correct order of processing when configuring NAT rules and security policies?

A. Policy lookup > source NAT > static NAT > destination NAT
B. Source NAT > static NAT > destination NAT > policy lookup
C. Static NAT > destination NAT> policy lookup > source NAT
JN0-230 Exam Dumps JN0-230 Exam Questions JN0-230 PDF Dumps JN0-230 VCE Dumps

https://www.braindump2go.com/jn0-230.html
 Braindump2go Guarantee All Exams 100% Pass
One Time!
D. Destination NAT > policy lookup > source NAT > static NAT

Answer: A

QUESTION 14
Which two statements are correct about functional zones? (Choose two.)

A. A functional zone uses security policies to enforce rules for transit traffic.
B. Traffic received on the management interface in the functional zone cannot transit out other interface.
C. Functional zones separate groups of users based on their function.
D. A function is used for special purpose, such as management interface

Answer: CD

QUESTION 15
Which two actions are performed on an incoming packet matching an existing session? (Choose two.)

A. Zone processing
B. Security policy evolution
C. Service ALG processing
D. Screens processing

Answer: AD

QUESTION 16
You have configured a Web filtering UTM policy?
Which action must be performed before the Web filtering UTM policy takes effect?

A. The UTM policy must be linked to an egress interface

B. The UTM policy be configured as a routing next hop.
C. The UTM policy must be linked to an ingress interface.
D. The UTM policy must be linked to a security policy

Answer: A

QUESTION 17
If you need to protect against malicious files that might be download through Web-based e-mail, which Sky ATP
protection mechanism should you use?

A. SMTP file inspection

B. IMAP file inspection
C. POP3 file inspection
D. HTTP file inspection

Answer: D

QUESTION 18
Which of the following are supported Mini-Physical Interface Modules (Mini-PIMs) on an SRX Series Services
Gateways? (Choose three.)

A. DOCSIS
B. 8-Port Gigabit Ethernet SFP XPIM
C. 1-Port Gigabit Ethernet PoE
D. Serial
E. 1-Port Gigabit Ethernet Small Form-Factor Pluggable (SFP)

JN0-230 Exam Dumps JN0-230 Exam Questions JN0-230 PDF Dumps JN0-230 VCE Dumps

https://www.braindump2go.com/jn0-230.html
 Braindump2go Guarantee All Exams 100% Pass
One Time!
Answer: ADE

QUESTION 19
You want to automatically generate the encryption and authentication keys during IPsec VPN establishment.
What would be used to accomplish this task?

A. IPsec
B. Diffie_Hellman
C. Main mode
D. Aggregate mode

Answer: B

QUESTION 20
BY default, revenue interface are placed into which system-defined security zone on an SRX series device?

A. Trust
B. Null
C. Junos-trust
D. untrust

Answer: A

QUESTION 21
On an SRX device, you want to regulate traffic base on network segments. In this scenario, what do you configure to
accomplish this task?

A. Screens
B. Zones
C. ALGs
D. NAT

Answer: A

QUESTION 22
Which two segments describes IPsec VPNs? (Choose two.)

A. IPsec VPN traffic is always authenticated.

B. IPsec VPN traffic is always encrypted.
C. IPsec VPNs use security to secure traffic over a public network between two remote sites.
D. IPsec VPNs are dedicated physical connections between two private networks.

Answer: C

JN0-230 Exam Dumps JN0-230 Exam Questions JN0-230 PDF Dumps JN0-230 VCE Dumps

https://www.braindump2go.com/jn0-230.html