Pass Juniper JN0-230 Exam With Practice Test Questions Dumps Bundle [Q34-Q54] : Exams Labs Braindumps : http://blog.examslabs.com

NEW QUESTION 34
Which two actions are performed on an incoming packet matching an existing session? (Choose two.)

Zone processing

Security policy evolution

Service ALG processing

Screens processing

NEW QUESTION 35
Users in your network are downloading files with file extensions that you consider to be unsafe for your network. You must prevent files with specific file extensions from entering your network.
Which UTM feature should be enable on an SRX Series device to accomplish this task?

Content filtering

Web filtering

Antispam

URL filtering

NEW QUESTION 36
You have configured antispam to allow e-mail from example.com, however the logs you see [email protected] blocked Referring to the exhibit.

What are two ways to solve this problem?

Verify connectivity with the SBL server.

[email protected] the profile antispam address whitelist.

[email protected] the profile antispam address blacklist

[email protected] the profile antispam address whitelist

NEW QUESTION 37
A new SRX Series device has been delivered to your location. The device has the factory-default configuration loaded. You have powered on the device and connected to the console port.
What would you use to log into the device to begin the initial configuration?

Root with a password of juniper”

Root with no password

Admin with password

Admin with a password ”juniper”

NEW QUESTION 38
By default, revenue interfaces are placed into which system-defined security zone on an SRX Series device?

junos-trust

untrust

trust

null

NEW QUESTION 39
Which two statements are correct about functional zones? (Choose two.)

A functional zone uses security policies to enforce rules for transit traffic.

Traffic received on the management interface in the functional zone cannot transit out other interface.

Functional zones separate groups of users based on their function.

A function is used for special purpose, such as management interface

NEW QUESTION 40
Which statements is correct about global security policies?

Global security require you to identify a source and destination zone.

Global policies eliminate the need to assign interface to security zones.

Global policies allow you to regulate traffic with addresses and applications, regardless of their security zones.

Traffic matching global is not added to the session table.

NEW QUESTION 41
What is the purpose of the Shadow Policies workspace in J-Web?

The Shadow Policies workspace shows unused security policies due to policy overlap.

The Shadow Policies workspace shows unused IPS policies due to policy overlap.

The Shadow Policies workspace shows used security policies due to policy overlap

The Shadow Policies workspace shows used IPS policies due to policy overlap

NEW QUESTION 42
You want to deploy, manage, and configure multiple SRX Series devices without an on-premises software solution.
Which solution would satisfy this requirement?

Junos Space Network Director

Juniper Sky Enterprise

Juniper SKY ATP

Juniper Advanced Threat Prevention

NEW QUESTION 43
Which UTM feature should you use to protect users from visiting certain blacklisted websites?

Content filtering

Web filtering

Antivirus

antispam

NEW QUESTION 44
You want to automatically generate the encryption and authentication keys during IPsec VPN tunnel establishment.
What would be used to accomplish this task?

main mode

aggressive mode

IPsec

Diffie-Hellman

NEW QUESTION 45
Which zone is considered a functional zone?

Trust

Junos host

Null

Management

NEW QUESTION 46
Which two statements are true about the null zone? (Choose two.)

All interface belong to the bull zone by default.

All traffic to the null zone is dropped.

All traffic to the null zone is allowed

The null zone is a user-defined zone

NEW QUESTION 47
Which statements is correct about SKY ATP?

Sky ATP is an open-source security solution.

Sky ATP is used to automatically push out changes to the AppSecure suite.

Sky ATP only support sending threat feeds to vSRX Series devices

Sky ATP is a cloud-based security threat analyzer that performs multiple tasks

NEW QUESTION 48
Which statement is correct about global security policies?

Global policies eliminate the need to assign logical interfaces to security zones.

Global security policies require you to identify a source and destination zone.

Traffic matching global policies is not added to the session table.

Global policies allow you to regulate traffic with addresses and applications, regardless of their security zones.

NEW QUESTION 49
Which two statements are true about security policy actions? (Choose two.)

The reject action drops the traffic and sends a message to the source device.

The deny action silently drop the traffic.

The deny action drops the traffic and sends a message to the source device.

The reject action silently drops the traffic.

NEW QUESTION 50
You have configured a Web filtering UTM policy?
Which action must be performed before the Web filtering UTM policy takes effect?

The UTM policy must be linked to an egress interface

The UTM policy be configured as a routing next hop.

The UTM policy must be linked to an ingress interface.

The UTM policy must be linked to a security policy

NEW QUESTION 51
Which two actions are performed on an incoming packet matching an existing session? (Choose two.)

Zone processing

Security policy evolution

Service ALG processing

Screens processing

NEW QUESTION 52
Which statement is correct about IKE?

IKE phase 1 is used to establish the data path

IKE phase 1 only support aggressive mode.

IKE phase 1 negotiates a secure channel between gateways.

IKE phase 1 establishes the tunnel between devices

NEW QUESTION 53
Your company uses SRX Series devices to secure the edge of the network. You are asked protect the company from ransom ware attacks.
Which solution will satisfy this requirement?

Sky ATP

AppSecure

Unified security policies

screens

NEW QUESTION 54
Which two match conditions would be used in both static NAT and destination NAT rule sets? (Choose two.)

Destination zone

Destination interface

Source interface

Source zone