Free Security, Associate Exam JN0-231 Exam Practice Test

Which two statements are correct about functional zones? (Choose two.)

• Functional zones must have a user-defined name.
• Functional zone cannot be referenced in security policies or pass transit traffic.
• Multiple types of functional zones can be defined by the user.
• Functional zones are used for out-of-band device management.

What are three primary match criteria used in a Junos security policy? (Choose three.)

• application
• source address
• source port
• class
• destination address

What is the number of concurrent Secure Connect user licenses that an SRX Series device has by default?

• 3
• 4
• 2
• 5

You want to enable the minimum Juniper ATP services on a branch SRX Series device. In this scenario, what are two requirements to accomplish this task? (Choose two.)

• Install a basic Juniper ATP license on the branch device.
• Configure the juniper-atp user account on the branch device.
• Register for a Juniper ATP account on https://sky.junipersecurity.net.
• Execute the Juniper ATP script on the branch device.

Which two traffic types are considered exception traffic and require some form of special handling by the PFE? (Choose two.)

• SSH sessions
• ICMP reply messages
• HTTP sessions
• traceroute packets

Which two components are part of a security zone? (Choose two.)

• inet.0
• fxp0
• address book
• ge-0/0/0.0

You want to provide remote access to an internal development environment for 10 remote developers. Which two components are required to implement Juniper Secure Connect to satisfy this requirement? (Choose two.)

• an additional license for an SRX Series device
• Juniper Secure Connect client software
• an SRX Series device with an SPC3 services card
• Marvis virtual network assistant

You are asked to configure your SRX Series device to block all traffic from certain countries. The solution must be automatically updated as IP prefixes become allocated to those certain countries. Which Juniper ATP solution will accomplish this task?

• Geo IP
• unified security policies
• IDP
• C&C feed

When are Unified Threat Management services performed in a packet flow?

• before security policies are evaluated
• as the packet enters an SRX Series device
• only during the first path process
• after network address translation

You want to implement user-based enforcement of security policies without the requirement of certificates and supplicant software. Which security feature should you implement in this scenario?

• integrated user firewall
• screens
• 802.1X
• Juniper ATP