JN0-231 Revolutionary Guide To Exam Juniper Dumps [Q11-Q25] : Exam for engine : http://blog.test4engine.com

Q11. Which statements is correct about global security policies?

Global policies allow you to regulate traffic with addresses and applications, regardless of their security zones.

Traffic matching global is not added to the session table.

Global policies eliminate the need to assign interface to security zones.

Global security require you to identify a source and destination zone.

Q12. Your company uses SRX Series devices to secure the edge of the network. You are asked protect the company from ransom ware attacks.
Which solution will satisfy this requirement?

Sky ATP

AppSecure

Unified security policies

screens

Q13. You have created a zones-based security policy that permits traffic to a specific webserver for the marketing team. Other groups in the company are not permitted to access the webserver. When marketing users attempt to access the server they are unable to do so.
What are two reasons for this access failure? (Choose two.)

You failed to change the source zone to include any source zone.

You failed to position the policy after the policy that denies access to the webserver.

You failed to commit the policy change.

You failed to position the policy before the policy that denies access the webserver

Q14. Which two notifications are available when the antivirus engine detects and infected file? (Choose two.)

e-mail notifications

SNMP notifications

SMS notifications

Protocol-only notification

Q15. You want to generate reports from the l-Web on an SRX Series device.
Which logging mode would you use in this scenario?

Syslog

Stream

Event

local

Q16. Which type of security policy protect restricted services from running on non-standard ports?

Application firewall

IDP

Sky ATP

antivirus

Q17. Which method do VPNs use to prevent outside parties from viewing packet in clear text?

Integrity

Authentication

Encryption

NAT_T

Q18. Which type of NAT is performed by the SRX Series device?

Source NAT with PAT

Source Nat without PAT

Destination NAT without PAT

Destination NAT with PAT

Q19. The free licensing model for Sky ATP includes which features? (Choose two.)

C & C feeds

Infected host blocking

Executable file inspection

Compromised endpoint dashboard

Q20. Exhibit.

Which two statements are true? (Choose two.)

Logs for this security policy are generated.

Logs for this security policy are not generated.

Traffic static for this security policy are not generated.

Traffic statistics for this security policy are generated.

Q21. Which two elements are needed on an SRX Series device to set up a remote syslog server? (Choose two.)

Data type

Data throughput

IP address

Data size

Q22. Exhibit.

Which statement is correct regarding the interface configuration shown in the exhibit?

The interface MTU has been increased.

The IP address has an invalid subnet mask.

The IP address is assigned to unit 0.

The interface is assigned to the trust zone by default.

Q23. Your company has been assigned one public IP address. You want to enable internet traffic to reach multiple servers in your DMZ that are configured with private address.
In this scenario, which type of NAT would be used to accomplish this tasks?

Static NAT

Destination NAT

Source NAT

NAT without PAT

Q24. Which statements is correct about SKY ATP?

Sky ATP is an open-source security solution.

Sky ATP is used to automatically push out changes to the AppSecure suite.

Sky ATP only support sending threat feeds to vSRX Series devices

Sky ATP is a cloud-based security threat analyzer that performs multiple tasks

Q25. Which two statements are true regarding zone-based security policies? (Choose two.)

Zone-based policies must reference a source address in the match criteria.

Zone-based policies must reference a URL category in the match criteria.

Zone-based policies must reference a destination address in the match criteria

Zone-based policies must reference a dynamic application in the match criteria.