How Many Questions Of JN0-230 Exam Dumps

NEW QUESTION 1
Exhibit.

Which two statements are true? (Choose two.)

• A. Logs for this security policy are generated.
• B. Logs for this security policy are not generated.
• C. Traffic static for this security policy are not generated.
• D. Traffic statistics for this security policy are generated.

Answer: AD

NEW QUESTION 2
Which statements is correct about SKY ATP?

• A. Sky ATP is an open-source security solution.
• B. Sky ATP is used to automatically push out changes to the AppSecure suite.
• C. Sky ATP only support sending threat feeds to vSRX Series devices
• D. Sky ATP is a cloud-based security threat analyzer that performs multiple tasks

Answer: D

NEW QUESTION 3
Referring to the exhibit.

Which type of NAT is being performed?

• A. Source NAT with PAT
• B. Source NAT without PAT
• C. Destination NAT without PAT
• D. Destination NAT with PAT

Answer: A

NEW QUESTION 4
You have configured antispam to allow e-mail from example.com, however the logs you see thatjcart@example.comis blocked
Referring to the exhibit.

What are two ways to solve this problem?

• A. Verify connectivity with the SBL server.
• B. Addjcart@exmple.comto the profile antispam address whitelist.
• C. Deletejcart@example.comfrom the profile antispam address blacklist
• D. Deletejcart@example.comfrom the profile antispam address whitelist

Answer: BC

NEW QUESTION 5
Which statements about NAT are correct? (Choose two.)

• A. When multiple NAT rules have overlapping match conditions, the rule listed first is chosen.
• B. Source NAT translates the source port and destination IP address.
• C. Source NAT translates the source IP address of packet.
• D. When multiple NAT rules have overlapping match conditions, the most specific rule is chosen.

Answer: AC

NEW QUESTION 6
Which security feature is applied to traffic on an SRX Series device when the device is running n packet mode?

• A. Sky ATP
• B. ALGs
• C. Firewall filters
• D. Unified policies

Answer: C

NEW QUESTION 7
The Sky ATP premium or basic-Threat Feed license is needed fort which two features? (Choose two.)

• A. Outbound protection
• B. C&C feeds
• C. Executable inspection
• D. Custom feeds

Answer: BD

NEW QUESTION 8
What is the purpose of the Shadow Policies workspace in J-Web?

• A. The Shadow Policies workspace shows unused security policies due to policy overlap.
• B. The Shadow Policies workspace shows unused IPS policies due to policy overlap.
• C. The Shadow Policies workspace shows used security policies due to policy overlap
• D. The Shadow Policies workspace shows used IPS policies due to policy overlap

Answer: A

NEW QUESTION 9
Host-inbound-traffic is configured on the DMZ zone and the ge-0/0/9.0 interface attached to that zone. Referring to the exhibit,

which to types of management traffic would be performed on the SRX Series device? (Choose two.)

• A. HTTPS
• B. SSH
• C. Finger
• D. HTTP

Answer: BD

NEW QUESTION 10
You have configured a Web filtering UTM policy?
Which action must be performed before the Web filtering UTM policy takes effect?

• A. The UTM policy must be linked to an egress interface
• B. The UTM policy be configured as a routing next hop.
• C. The UTM policy must be linked to an ingress interface.
• D. The UTM policy must be linked to a security policy

Answer: D

NEW QUESTION 11
Which management software supports metadata-based security policies that are ideal for cloud deployments?

• A. Security Director
• B. J-Web
• C. Network Director
• D. Sky Enterprise

Answer: A

NEW QUESTION 12
Users should not have access to Facebook, however, a recent examination of the logs security show that users are accessing Facebook.
Referring to the exhibit,

what should you do to solve this problem?

• A. Change the source address for the Block-Facebook-Access rule to the prefix of the users
• B. Move the Block-Facebook-Access rule before the Internet-Access rule
• C. Move the Block-Facebook-Access rule from a zone policy to a global policy
• D. Change the Internet-Access rule from a zone policy to a global policy

Answer: B

NEW QUESTION 13
Which two elements are needed on an SRX Series device to set up a remote syslog server? (Choose two.)

• A. Data type
• B. Data throughput
• C. IP address
• D. Data size

Answer: AC

NEW QUESTION 14
On an SRX device, you want to regulate traffic base on network segments. In this scenario, what do you configure to accomplish this task?

• A. Screens
• B. Zones
• C. ALGs
• D. NAT

Answer: B

NEW QUESTION 15
Your company has been assigned one public IP address. You want to enable internet traffic to reach multiple servers in your DMZ that are configured with private address.
In this scenario, which type of NAT would be used to accomplish this tasks?

• A. Static NAT
• B. Destination NAT
• C. Source NAT
• D. NAT without PAT

Answer: B

NEW QUESTION 16
Which statements is correct about Junos security zones?

• A. User-defined security must contain at least one interface.
• B. Security policies are referenced within a user-defined security zone.
• C. Logical interface are added to user defined security zones
• D. User-defined security must contains the key word ‘’zone’’

Answer: C

NEW QUESTION 17
Which two actions are performed on an incoming packet matching an existing session? (Choose two.)

• A. Zone processing
• B. Security policy evolution
• C. Service ALG processing
• D. Screens processing

Answer: CD

NEW QUESTION 18
What should you configure if you want to translate private source IP address to a single public IP address?

• A. Source NAT
• B. Destination NAT
• C. Content filtering
• D. Security Director

Answer: A

NEW QUESTION 19
Which two statements are true regarding zone-based security policies? (Choose two.)

• A. Zone-based policies must reference a source address in the match criteria.
• B. Zone-based policies must reference a URL category in the match criteria.
• C. Zone-based policies must reference a destination address in the match criteria
• D. Zone-based policies must reference a dynamic application in the match criteria.

Answer: AC

NEW QUESTION 20
BY default, revenue interface are placed into which system-defined security zone on an SRX series device?

• A. Trust
• B. Null
• C. Junos-trust
• D. untrust

Answer: D

NEW QUESTION 21
Which UTM feature should you use to protect users from visiting certain blacklisted websites?

• A. Content filtering
• B. Web filtering
• C. Antivirus
• D. antispam

Answer: B

NEW QUESTION 22
Which two statements are true about security policy actions? (Choose two.)

• A. The reject action drops the traffic and sends a message to the source device.
• B. The deny action silently drop the traffic.
• C. The deny action drops the traffic and sends a message to the source device.
• D. The reject action silently drops the traffic.

Answer: AB

NEW QUESTION 23
You verify that the SSH service is configured correctly on your SRX Series device, yet administrators attempting to connect through a revenue port are not able to connect.
In this scenario, what must be configured to solve this problem?

• A. A security policy allowing SSH traffic.
• B. A host-inbound-traffic setting on the incoming zone
• C. An MTU value target than the default value
• D. A screen on the internal interface

Answer: B

NEW QUESTION 24
What are two characteristic of static NAT SRX Series devices? (Choose two.)

• A. Source and destination NAT rules take precedence over static NAT rules.
• B. A reverse mapping rule is automatically created for the source translation.
• C. Static NAT rule take precedence over source and destination NAT rules.
• D. Static rules cannot coexist with destination NAT rules on the same SRX Series device configuration.

Answer: BC

NEW QUESTION 25
Which two statements are true about UTM on an SRX340? (Choose two.)

• A. A default UTM policy is created.
• B. No default profile is created.
• C. No default UTM policy is created
• D. A default UTM profile is created

Answer: BC

NEW QUESTION 26
......