Juniper Security, Associate (JNCIA-SEC) - JN0-231 Free Exam Questions

A. physical interface

B. zone

C. routing instance

D. logical interface

A. The decision to permit or deny is based on the body content of an HTTP packet.

B. The Juniper Enhanced Web Filtering solution requires a locally managed server.

C. The client can receive an e-mail notification when traffic is blocked.

D. The decision to permit or deny is based on the category to which a URL belongs.

A. Geo IP feeds

B. Web content filtering

C. DDoS protection

D. malware inspection

A. IKE security associations are established during IKE Phase 2 negotiations.

B. IKE security associations are unidirectional.

C. IKE security associations are bidirectional.

D. IKE security associations are established during IKE Phase 1 negotiations.

A. the physical interface card (PIC)

B. the flexible PIC concentrator (FPC)

C. the interface logical number

D. the port number

A. Packet mode bypasses the flow module.

B. Packet mode works with NAT, VPNs, UTM, IDP, and other advanced security services.

C. Packet mode is the basis for stateful processing.

D. Packet mode enables session-based processing of incoming packets.

A. Functional zone cannot be referenced in security policies or pass transit traffic.

B. Functional zones must have a user-defined name.

C. Multiple types of functional zones can be defined by the user.

D. Functional zones are used for out-of-band device management.

A. certificate-based

B. local authentication

C. multi-factor authentication

D. active directory

A. The null zone is created by default.

B. Traffic sent or received by an interface in the null zone is discarded.

C. You must enable the null zone before you can place interfaces into it.

D. The null zone is a functional security zone.