JN0-231 Exam Questions and Answers | Exam-Dumps (Page: 3)

QUESTION: 11

Which statement about global NAT address persistence is correct?

The same IP address from a source NAT pool will be assigned for all sessions from a given host.
The same IP address from a source NAT pool is not guaranteed to be assigned for all sessions from a given host.
The same IP address from a destination NAT pool will be assigned for all sessions for a given host.
The same IP address from a destination NAT pool is not guaranteed to be assigned for all sessions for a given host.

Answer(s): A

Explanation:

Use the persistent-nat feature to ensure that all requests from the same internal transport address are mapped to the same reflexive transport address (the public IP address and port created by the NAT device closest to the STUN server). The source NAT rule action can use a source NAT pool (with or without port translation) or an egress interface.

Reveal Solution Next Question

QUESTION: 12

You are asked to configure your SRX Series device to block all traffic from certain countries. The solution must be automatically updated as IP prefixes become allocated to those certain countries.
Which Juniper ATP solution will accomplish this task?

Geo IP
unified security policies
IDP
C&C feed

Answer(s): A

Explanation:

Juniper ATP Geo IP can help to accomplish this task by using geolocation services to determine the geographical location of IP addresses. As IP prefixes get allocated to the countries that you have specified, the Geo IP solution will automatically update the configured firewall policies to block any traffic that is coming from those specific countries.
This is a great solution for blocking specific countries - as it will allow for a more personalized and targeted approach to firewall policies - and thus, to increase the effectiveness of the solution at blocking potential malicious traffic.

Reveal Solution Next Question

QUESTION: 13

Which two statements are correct about IKE security associations? (Choose two.)

IKE security associations are established during IKE Phase 1 negotiations.
IKE security associations are unidirectional.
IKE security associations are established during IKE Phase 2 negotiations.
IKE security associations are bidirectional.

Answer(s): A,D

Reveal Solution Next Question

QUESTION: 14

You want to deploy a NAT solution.
In this scenario, which solution would provide a static translation without PAT?

interface-based source NAT
pool-based NAT with address shifting
pool-based NAT with PAT
pool-based NAT without PAT

Answer(s): B

Explanation:

Translation of the original source IP address to an IP address from a user-defined address pool by shifting the IP addresses. This type of translation is one-to-one, static, and without port address translation. If the original source IP address range is larger than the IP address range in the user- defined pool, untranslated packets are dropped.
https://www.juniper.net/documentation/us/en/software/junos/nat/topics/topic-map/nat-security- source-and-source-pool.html

Reveal Solution Next Question

QUESTION: 15

Which Juniper Networks solution uses static and dynamic analysis to search for day-zero malware threats?

firewall filters
UTM
Juniper ATP Cloud
IPS

Answer(s): C

Explanation:

Malware Sandboxing
Detect and stop zero-day and commodity malware within web, email, data center, and application traffic targeted for Windows, Mac, and IoT devices.
https://www.juniper.net/us/en/products/security/advanced-threat-prevention.html

Reveal Solution Next Question

Juniper JN0-231 Exam (page: 3) Juniper Security, Associate (JNCIA-SEC) Updated on: 25-Dec-2025

QUESTION: 11

Explanation:

QUESTION: 12

Explanation:

QUESTION: 13

QUESTION: 14

Explanation:

QUESTION: 15

Explanation:

Juniper JN0-231 Exam (page: 3)
Juniper Security, Associate (JNCIA-SEC)
Updated on: 25-Dec-2025