Security, Associate (JNCIA-SEC) (JN0-232) Free Practice Test

Question 1

Click the Exhibit button.

Referring to the exhibit, which two statements are correct about the traffic flow shown in the exhibit? (Choose two.)

A. The original destination IP address was translated to a new destination IP address.

B. The original source IP address was translated to a new source IP address.

C. There is no change to the original source IP address.

D. There is no change to the original destination IP address.

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

A URL is not found in the local allow list, block list, or local cache during the NextGen Web Filtering process. Which action does the SRX Series Firewall take in this scenario?

A. It blocks the URL by default.

B. It sends a TCP reset message to the client.

C. It forwards the URL to the NextGen Web Filtering application in the Juniper cloud.

D. It allows the URL by default.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which two statements about the null zone on an SRX Series Firewall are correct? (Choose two.)

A. The null zone can be configured to accept traffic to or from the SRX Series Firewall.

B. Traffic rejected by the security policy is sent to the null zone for logging.

C. Transit interfaces are assigned to the null zone by default.

D. A logical interface configured in a security zone removes it from the null zone.

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

What are two ways that an SRX Series device identifies content? (Choose two.)

A. It identifies and inspects the file extension of each file.

B. It uses AppI

C. It identifies file types in HTTP, FTP, and e-mail protocols.

D. It uses ALGs.

Correct Answer: B,C

Question 5

Which statement is correct about security policies?

A. Security policies are evaluated before screens in first path processing.

B. Zone-based security policies only apply to intra-zone traffic.

C. Security policies are evaluated in both first path and fast path processing.

D. Zone-based security policies reference both source and destination zones.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

You need to ensure that the security policy is configured correctly for a flow with both source NAT and destination NAT involved. In this scenario, which two match conditions are valid for source and destination addresses? (Choose two.)

A. pre-NAT destination address

B. post-NAT source address

C. pre-NAT source address

D. post-NAT destination address

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which two characteristics of destination NAT and static NAT are correct? (Choose two.)

A. Destination NAT supports port forwarding.

B. Static NAT uses Port Address Translation.

C. Static NAT automatically creates a matching rule for the opposite direction.

D. Destination NAT requires address range sizes that match the devices being translated.

Correct Answer: A,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Juniper Security, Associate (JNCIA-SEC) (JN0-232) Free Practice Test