JN0-231 Exam Questions and Answers | Exam-Dumps.net (Page: 1)

QUESTION: 1

Which two criteria should a zone-based security policy include? (Choose two.)

a source port
a destination port
zone context
an action

Answer(s): A,B

Explanation:

A security policy is a set of statements that controls traffic from a specified source to a specified destination using a specified service. A policy permits, denies, or tunnels specified types of traffic unidirectionally between two points.

Each policy consists of:

A unique name for the policy.
A from-zone and a to-zone, for example: user@host# set security policies from-zone untrust to-zone untrust
A set of match criteria defining the conditions that must be satisfied to apply the policy rule. The match criteria are based on a source IP address, destination IP address, and applications. The user identity firewall provides greater granularity by including an additional tuple, source-identity, as part of the policy statement.
A set of actions to be performed in case of a match--permit, deny, or reject.

Accounting and auditing elements--counting, logging, or structured system logging.

https://www.juniper.net/documentation/us/en/software/junos/security-policies/topics/topic- map/security-policy-configuration.html

Reveal Solution Next Question

QUESTION: 2

You are assigned a project to configure SRX Series devices to allow connections to your webservers. The webservers have a private IP address, and the packets must use NAT to be accessible from the

Internet. You do not want the webservers to initiate connections with external update servers on the Internet using the same IP address as customers use to access them.
Which two NAT types must be used to complete this project? (Choose two.)

static NAT
hairpin NAT
destination NAT
source NAT

Answer(s): C,D

Reveal Solution Next Question

QUESTION: 3

You are asked to verify that a license for AppSecure is installed on an SRX Series device. In this scenario, which command will provide you with the required information?

user@srx> show system license
user@srx> show services accounting
user@srx> show configuration system
user@srx> show chassis firmware

Answer(s): A

Reveal Solution Next Question

QUESTION: 4

Click the Exhibit button.

Referring to the exhibit, a user is placed in which hierarchy when the exit command is run?

[edit security policies from-zone trust to-zone dmz]
user@vSRX-1#
[edit]
user@vSRX-1#
[edit security policies]
user@vSRX-1#
user@vSRX-1>

Answer(s): A

Reveal Solution Next Question

QUESTION: 5

You want to enable the minimum Juniper ATP services on a branch SRX Series device. In this scenario, what are two requirements to accomplish this task? (Choose two.)

Install a basic Juniper ATP license on the branch device.
Configure the juniper-atp user account on the branch device.
Register for a Juniper ATP account on https://sky.junipersecurity.net.
Execute the Juniper ATP script on the branch device.

Answer(s): C,D

Explanation:

https://manuals.plus/m/95fded847e67e8f456453182a54526ba3224a61a337c47177244d345d1f3b1 9e.pdf

Reveal Solution Next Question

Juniper JN0-231 Exam (page: 1)
Juniper Security, Associate (JNCIA-SEC)
Updated on: 25-Sep-2025

Access free JN0-231 actual exam questions, answers, explanations and user discussions.

QUESTION: 1

Explanation:

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

Explanation:

Juniper JN0-231 Exam (page: 1) Juniper Security, Associate (JNCIA-SEC) Updated on: 25-Sep-2025

Access free JN0-231 actual exam questions, answers, explanations and user discussions.

QUESTION: 1

Explanation:

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

Explanation:

Juniper JN0-231 Exam (page: 1)
Juniper Security, Associate (JNCIA-SEC)
Updated on: 25-Sep-2025