QUESTION: 29

Which two statements are correct about functional zones? (Choose two.)

Functional zones must have a user-defined name.
Functional zone cannot be referenced in security policies or pass transit traffic.
Multiple types of functional zones can be defined by the user.
Functional zones are used for out-of-band device management.

Answer(s): B,D

You are assigned a project to configure SRX Series devices to allow connections to your webservers. The webservers have a private IP address, and the packets must use NAT to be accessible from the Internet. The webservers must use the same address for both connections from the Internet and communication with update servers.
Which NAT type must be used to complete this project?

source NAT
destination NAT
static NAT
hairpin NAT

Answer(s): C

Explanation:

Only static NAT with pool ensures both traffic initiated from inside and outside networks use the same IP address.

Reveal Solution Next Question

QUESTION: 31

Which two user authentication methods are supported when using a Juniper Secure Connect VPN? (Choose two.)

certificate-based
multi-factor authentication
local authentication
active directory

Answer(s): C,D

Explanation:

"Local Authentication--In local authentication, the SRX Series device validates the user credentials by checking them in the local database. In this method, the administrator handles change of password or resetting of forgotten password. Here, it requires that an user must remember a new password. This option is not much preferred from a security standpoint. · External Authentication--In external authentication, you can allow the users to use the same user credentials they use when accessing other resources on the network. In many cases, user credentials are domain logon used for Active Directory or any other LDAP authorization system. This method simplifies user experience and improves the organization's security posture; because you can maintain the authorization system with the regular security policy used by your organization."

https://www.juniper.net/documentation/us/en/software/secure-connect/secure-connect- administrator-guide/topics/topic-map/secure-connect-getting-started.html

Reveal Solution Next Question

QUESTION: 32

Click the Exhibit button.

Which two statements are correct about the partial policies shown in the exhibit? (Choose two.)

UDP traffic matched by the deny-all policy will be silently dropped.
TCP traffic matched by the reject-all policy will have a TCP RST sent.
TCP traffic matched from the zone trust is allowed by the permit-all policy.
UDP traffic matched by the reject-all policy will be silently dropped.

Answer(s): A,B

Reveal Solution Next Question

Security, Associate (JNCIA-SEC)
JN0-231 Exam

QUESTION: 29

QUESTION: 30

Explanation:

QUESTION: 31

Explanation:

QUESTION: 32

Security, Associate (JNCIA-SEC) JN0-231 Exam

QUESTION: 29

QUESTION: 30

Explanation:

QUESTION: 31

Explanation:

QUESTION: 32

Security, Associate (JNCIA-SEC)
JN0-231 Exam