Security, Associate (JNCIA-SEC) (JN0-232) Free Practice Test

Question 1

Which security policy component is highlighted in the exhibit?

A. security zone context

B. unique policy name

C. policy action

D. match criteria

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which statement is correct about static NAT?

A. Static NAT implements unidirectional one-to-many mappings.

B. Static NAT supports port translation.

C. Static NAT rules are evaluated after source NAT rules.

D. Static NAT implements unidirectional one-to-one mappings.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which two statements are correct about screens? (Choose two.)

A. A single screen can be associated with multiple security zones.

B. Screens are only used on first path traffic.

C. Screens only detect IP-based attacks.

D. Screens are applied on the security zone of the ingress interface.

Correct Answer: A,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

You are not able to ping an interface on an SRX Series Firewall.
Which two actions should you take to solve this issue? (Choose two.)

A. Assign the interface to a security zone.

B. Configure the ICMP protocol for host-inbound-traffic.

C. Create a security policy to allow ping traffic.

D. Assign the interface to the null zone.

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Referring to the exhibit, which action would you take to permit the traffic shown in the exhibit?

A. Assign the fxp0.0 interface to a security zone.

B. Assign the ge-0/0/1.0 interface to a security zone.

C. Enable flow-mode processing for family mpls.

D. Enable flow-mode processing for family inet.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which two statements are correct about security policies in SRX Series Firewalls? (Choose two.)

A. A security policy can control both transit traffic and self-traffic.

B. A security policy can control both intra-zone traffic and inter-zone traffic.

C. A security policy can only control transit traffic.

D. A security policy can only control inter-zone traffic.

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which two products will allow security policy management on SRX Series devices? (Choose two.)

A. Juniper Mist

B. JIMS

C. JSA

D. Security Director

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

What is the number of concurrent Secure Connect user licenses that an SRX Series device has by default?

A. 4

B. 3

C. 5

D. 2

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Juniper Security, Associate (JNCIA-SEC) (JN0-232) Free Practice Test